When i set up a new machine these days, I often disable password-based
ssh access by setting PasswordAuthentication
and
ChallengeResponseAuthentication
to no
in /etc/ssh/sshd_config
.
This protects my users (and the machine) from dictionary attacks based
on the crappy passwords that humans seem to traditionally prefer.
However, /usr/sbin …