sshd not allowing a subgroup to authenticate according to it's authentication method

David Mehler dave.mehler at
Wed Mar 25 05:01:41 UTC 2020


Thanks, actually it's not anyone in the sshusers group, that's working
fine, and I am not in sftpusers. Other users are in that group and
they're being prompted for public keys and rejected because they're
trying to use passwords.

On 3/25/20, Jim Trigg <jtrigg at> wrote:
> At a guess, you're also a member of sshusers. Try putting the sftpusers
> stanza before the sshusers stanza.
> Thanks,
> Jim Trigg
> On March 24, 2020 7:52:00 PM EDT, David Mehler <dave.mehler at>
> wrote:
>>I'm running sshd on FreeBSD 12.1. I'm having an issue, I want users in
>>a group sftpusers to be able to be logged in via password and to be
>>chrooted to their home directories. Everytime I try to log in I'm
>>getting no supported authenticationmethods publickey. From the man
>>page I thought that a group definition overrode a global configuration
>>setting. Here's a config snipet:
>># Authentication:
>>AuthenticationMethods publickey
>>#StrictModes yes
>>#PubkeyAuthentication yes
>>#PasswordAuthentication no
>>#PermitEmptyPasswords no
>>ChallengeResponseAuthentication no
>>UsePAM no
>>AllowAgentForwarding no
>>AllowTcpForwarding no
>>#GatewayPorts no
>>#ChrootDirectory none
>>Subsystem       sftp    internal-sftp
>># Set up groups for different types of logins
>>AllowGroups sshusers sftpusers
>>Match Group sshusers
>>PubkeyAuthentication yes
>>PasswordAuthentication no
>>X11Forwarding no
>>AllowTcpForwarding no
>>    AllowAgentForwarding no
>>    PermitTunnel no
>>Match Group sftpusers
>>ChrootDirectory /home/%u
>>ForceCommand internal-sftp
>>X11Forwarding no
>>AllowTcpForwarding no
>>    AllowAgentForwarding no
>>    PermitTunnel no
>>    PermitTTY no
>>PasswordAuthentication yes
>>Suggestions welcome.
>>freebsd-questions at mailing list
>>To unsubscribe, send any mail to
>>"freebsd-questions-unsubscribe at"
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.

More information about the freebsd-questions mailing list