#MAC SSH SERVER CONFIG MAC#

Also, the permissions for the ~/.ssh folder should be 700. Device(config) ip ssh server algorithm mac hmac-sha2 hmac-sha2-96 Device(config) ip ssh client algorithm mac hmac-sha2 hmac-sha2-96 Defines the order of MAC (Message Authentication Code) algorithms in the SSH server and client. If your private key permissions are set to 644 then any user could read your private key and impersonate you.

This is really important if you have both your public and private key in your ~/.ssh folder and there are multiple users on the system. In this case, the system does not verify the integrity of the data. My private key permissions are set to 600 on my client computer. host1(config)ip ssh mac client-to-server default hmac-sha1 host1(config)ip ssh mac server-to-client hmac-md5 Although it is not recommended, you can also specify none. It is important to note that those permissions are for my public key. Here are the config options I changed: PermitRootLogin noДЄfter that I was successfully able to generate SSH keys on my client computer, moved the public key to ~/.ssh/authorized_keys on the Mac and set permissions for that file to 644. Here is the resource where I found the pertinent information: After that, I restarted the service with sudo launchctl stop and then sudo launchctl start and I was able to get my desired behavior. I think this probably would have also worked if I edited /etc/sshd_config as per the updated answer from but I didn't test that yet so I can't say for sure. I was editing the wrong configuration file! Instead of /etc/ssh_config, I edited private/etc/sshd_config.

#MAC SSH SERVER CONFIG PASSWORD#

How do I set up my ssh_config to so that it doesn't ask for the password and only accepts SSH keys? Am I not restarting the daemon properly? Is there another step I am missing? I took a look at this post and from the answer I added UsePAM no to the config file and restarted the service with launchctl again. When I try to SSH in from the client again, it still asks for my password.

I restarted SSH with these commands: sudo launchctl unload /System/Library/LaunchDaemons/ssh.plist, then sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist. I edited /etc/ssh_config and set PasswordAuthentication no. I've generated SSH keys on my client computer but I wanted to get the SSH Daemon on the Mac setup first. From my client computer I'm able to ssh for the public IP and I am able to get into the Mac, so port forwarding is working. My goal is to access this Mac from outside the network. I'm trying to access a Mac remotely (I do have physical access to this Mac) through SSH from a Linux client computer.

Mac ssh server config