shell-things/etc/ssh/sshd_config.d/user-permit-password.conf

# This is the opposite of mikaela-prohibit-password.conf and shouldn't be
# used, that is why it's in comments.

# As of OpenSSH_8.4p1 this may be the only way this works, with globally
# blocking passwords, but accepting only specific users to use passwords.
# https://serverfault.com/a/461865 OpenSSH_8.4p1

#Match User someone
#    PasswordAuthentication yes
#    AuthenticationMethods any
#Match All
sshd/user-permit-password.conf: note on how to allow specific user to use passwords 2021-02-01 16:11:06 +01:00			`# This is the opposite of mikaela-prohibit-password.conf and shouldn't be`
sshd: move mikaela-prohibit-password.conf to broken/ Apparently OpenSSH only allows PasswordAuthentication yes within a Match block. 2021-02-02 13:12:43 +01:00			`# used, that is why it's in comments.`

			`# As of OpenSSH_8.4p1 this may be the only way this works, with globally`
			`# blocking passwords, but accepting only specific users to use passwords.`
			`# https://serverfault.com/a/461865 OpenSSH_8.4p1`
sshd/user-permit-password.conf: note on how to allow specific user to use passwords 2021-02-01 16:11:06 +01:00
			`#Match User someone`
			`# PasswordAuthentication yes`
			`# AuthenticationMethods any`
sshd: explicitly "terminate" Match blocks by Match All https://unix.stackexchange.com/a/303982/17126 & man sshd_config 2021-02-02 12:58:35 +01:00			`#Match All`