4 ms·

I disable password login all my hosts but good to know people do this.

• midasuni 3y ago
  Can’t do that in some cases. Tacacs for example doesn’t allow for private keys
  • vinay_ys 3y ago
    Don't use that then. Tell that vendor their security posture is bad.
    • blueflow 3y ago
      Its Cisco. They already know that.
  • nixgeek 3y ago
    I’ve worked at more than one place where you SSH into a Linux host (often just for that datacenter) using certificate-based authentication, only to be printed a JIT (just in time) password for TACACS-based usage in that datacenter, and which is only valid for a few minutes. Workarounds are many for network devices it seems!