15
gitpush
6y

Damn it gitpush focus when type the damn password!! I locked my self out of my server again 😭

Time to visit the portal and login 😒

Comments
  • 1
    I use three step login: ssh + password + code from two step login of Google.
    So ya I fucked up on the first step lol
  • 0
    @CriticalFailure the funny thing I mistakenly pressed / which is above my enter key so it was sent with the password and I have fail2ban block for 24hours after one failed attempt 😅😓
  • 2
    Can you not use key based auth? For me, it's much more convenient than passwords.
  • 1
    @ymas I don't understand can you ease explain more?
    My current auth is as follows:
    1. Ssh key
    2. Password
    3. Auth code

    All three must be provided or no ssh session will open

    Oh and I also need to knock the port first before starting ssh
  • 1
    @gitpush I don't know what your use cases are but this is what I do. I always disable password authentication because the thought of passwords going across the ether kinda scares me. Port 22 is *always* closed, I auto-block the entire subnet of any IP connecting on port 22. My firewall forwards to the correct box. I have two keys, one for a user that can't wheel and one for a user that can. They are stored on an encrypted filesystem and a passphrase is required to use them. All password checks are local. Take a look at these links:

    https://security.stackexchange.com/...

    https://security.stackexchange.com/...
  • 0
    @ymas great thanks man I'll check k those links 😀😀
Add Comment