{"id":844,"date":"2023-09-27T11:31:29","date_gmt":"2023-09-27T11:31:29","guid":{"rendered":"https:\/\/blog.ngocha.biz\/?p=844"},"modified":"2023-09-27T11:31:29","modified_gmt":"2023-09-27T11:31:29","slug":"enable-password-authentication","status":"publish","type":"post","link":"https:\/\/blog.ngocha.biz\/?p=844","title":{"rendered":"How to Enable Password Authentication for Digital Ocean Droplet"},"content":{"rendered":"

In this blog, I will show you how to enable password-based SSH authentication for Digital Ocean<\/a> Droplets.<\/p>\n

Note: This will work on Ubuntu, Debina, Fedora and other linux Droplets.<\/p><\/blockquote>\n

Password Login Error<\/h2>\n

Digital ocean droplets support both SSH key and password-based authentication.<\/p>\n

By default, if you choose SSH key based authentication by creating SSH keys,<\/a> you cannot use a password to log in to the Droplet.<\/p>\n

For example, you might configure a WordPress setup<\/a> using Serverpilot and create a system user and password.<\/p>\n

If you try to use the username and password to login, you will get the ermission denied (publickey) error as shown below.<\/p>\n

The authenticity of host '165.227.121.128 (165.227.121.128)' can't be established.\nED25519 key fingerprint is SHA256:x5Zx6Z3GdqOHintxvrPnChPcYX+uG6plswRgsi6lKUQ.\nThis key is not known by any other names\nAre you sure you want to continue connecting (yes\/no\/[fingerprint])? yes\nFailed to add the host to the list of known hosts (\/Users\/serverpilot\/.ssh\/known_hosts).\nserverpilot@165.227.121.128: Permission denied (publickey).<\/code><\/pre>\n
Now lets look at the solution to enable password based authentication on Droplets.<\/p>\n
Enable Password Authentication<\/h2>\n
Follow the steps given below enable the password authentication.<\/p>\n
Step 1: Login to the Droplet as root<\/h3>\n
If you have keypair to login, you can use the ssh command to login to the server.<\/p>\n
If you don’t have the keypair, use the Launch Droplet Console<\/strong> option present in the Droplet settings as shown below.<\/p>\n
\"Droplet<\/figure>\n
It will open a browser based SSH terminal as shown below.<\/p>\n
\"Droplet<\/figure>\n
Step 2: Locate cloud-init.conf<\/h3>\n
All the ssh related configuration are present in the sshd_config<\/code><\/strong> file located in the \/etc\/ssh folder.<\/p>\n
Open the \/etc\/ssh\/sshd_config<\/code><\/strong> file using vi editor.<\/p>\n
vi \/etc\/ssh\/sshd_config<\/code><\/pre>\n
Now, inside you will find the following Include statement in the starting of the sshd_config file.<\/p>\n
Include \/etc\/ssh\/sshd_config.d\/*.conf<\/code><\/pre>\n
cd into \/etc\/ssh\/sshd_config.d folder. This folder contains cloud-init.conf <\/code><\/strong>file with system wide PasswordAuthentication<\/code><\/strong> parameter.<\/p>\n
cd \/etc\/ssh\/sshd_config.d<\/code><\/pre>\n
If you list the files you will see a file named 50-cloud-init.conf<\/code><\/strong><\/p>\n
root@techiescamp:~# cd \/etc\/ssh\/sshd_config.d\/\nroot@techiescamp:\/etc\/ssh\/sshd_config.d# ls\n50-cloud-init.conf\nroot@techiescamp:\/etc\/ssh\/sshd_config.d#<\/code><\/pre>\n
Step 3: Enable PasswordAuthentication in 50-cloud-init.conf<\/h3>\n
Open the 50-cloud-init.conf<\/code><\/strong>  file in vi or nano editor.<\/p>\n
50-cloud-init.conf<\/code><\/pre>\n
You will find the PasswordAuthentication<\/code><\/strong> parameter set to no<\/code><\/strong>. Change it to yes<\/code><\/strong> as shown below and save the file.<\/p>\n
PasswordAuthentication yes<\/code><\/pre>\n
Step 4: Restart SSHD Service<\/h3>\n
Now, restart the sshd service for the changes to take effect.<\/p>\n
sudo systemctl restart sshd<\/code><\/pre>\n
Step 5: Login Using Username and Password<\/h3>\n
Now that we have enabled the password authentication, you can login to the Droplet using username and password.<\/p>\n
Conclusion<\/h2>\n
I would always recommend using SSH key pair for Droplet authentication. However, if you have a usecase to have username and password based authentication, ensure you use a strong SSH password.<\/p>\n
Also, if you want to avoid the server administration overhead, you can use managed cloud hosting service Cloudways with Digital ocean backend. Cloudways is owned by Digital ocean. So you get the best of both worlds. Managed hosting + power of Digital Ocean cloud. You can read more about Cloudway in my details Cloudways Review<\/a>.<\/p>\n
\n
Ngu\u1ed3n:<\/strong> How to Enable Password Authentication for Digital Ocean Droplet \u2014 DevOpsCube<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Source: https:\/\/devopscube.com\/enable-password-authentication\/<\/p>\n","protected":false},"author":1,"featured_media":845,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/posts\/844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=844"}],"version-history":[{"count":0,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/posts\/844\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=\/wp\/v2\/media\/845"}],"wp:attachment":[{"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ngocha.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}