Restrict Password-Based SSH Access Per User and Allow Key Authentication

linuxssh

Is it possible to disable PASSWORD SSH access to user but to allow Key authentication on a per user basis ?
I mean, I have a userA whom I don't want to give Password based access BUT I wan't him to only use key authentication to access the server(s).
Thanks

Best Answer

You can add "Match" sections to match on particular users or groups at the bottom of sshd_config, like:

Match user stew
PasswordAuthentication no

or

Match group dumbusers
PasswordAuthentication no