# Disable password authentication for web access

**URL:** <https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590>\
**Category:** Community Support\
**Tags:** webaccess, thinlinc\
**Created:** [2 April 2023 11:15 UTC](https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590 "2023-04-02T11:15:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![navtoj](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/navtoj/32/284_2.png) [@navtoj](https://community.thinlinc.com/u/navtoj)\
**Post date:** [2 April 2023 11:15 UTC](https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590/1 "2023-04-02T11:15:44Z")

</div>

I have a headless debian linux machine running the ThinLinc server which I only access via the macOS client using `PubkeyAuthentication`.

In my host’s `sshd_config` file, I have set `PasswordAuthentication` to no but the ThinLinc web client still allows access to the linux machine using direct `PasswordAuthentication`.

 ![image](https://europe1.discourse-cdn.com/flex005/uploads/thinlinc/original/1X/91fa42d13085ced3069affd0bfe135e98cf1d787.png)

How do i disable `PasswordAuthentication` for ThinLinc Web Access?

---

<div class="post-metadata">

**Author:** ![martin](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/martin/32/41_2.png) [@martin](https://community.thinlinc.com/u/martin)\
**Post date:** [3 April 2023 07:08 UTC](https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590/2 "2023-04-03T07:08:24Z")

</div>

Hello @navtoj, and welcome to the ThinLinc community!

ThinLinc Webaccess does not use sshd for authentication, so any settings made to sshd\_config won’t affect Webaccess.  
You would need to configure PAM to change authentication settings for ThinLinc Webaccess.

In `/etc/pam.d/` you’ll find a that `thinlinc` is a symlinc to `sshd` pam configuration. To make modifications (without disrupting the sshd PAM config), simply remove thinlinc symlinc and copy sshd to thinlinc and make modifications to this file.

This is a bit out of scope for what type of support we can provide and have knowledge of. But keep in mind that Password authentication and One Time password are the only supported types of authentications for webbaccess:

[https://www.cendio.com/what/features](https://www.cendio.com/what/features)

Pubkey auth won’t work in Webaccess.

Kind regards,  
Martin

---

<div class="post-metadata">

**Author:** ![navtoj](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/navtoj/32/284_2.png) [@navtoj](https://community.thinlinc.com/u/navtoj)\
**Post date:** [3 April 2023 07:20 UTC](https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590/3 "2023-04-03T07:20:30Z")

</div>

> [@martin](#):
>
> Password authentication and One Time password are the only supported types of authentications

In that case, is there a way to disable web access and only allow access through the macOS client?

---

<div class="post-metadata">

**Author:** ![martin](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/martin/32/41_2.png) [@martin](https://community.thinlinc.com/u/martin)\
**Post date:** [3 April 2023 07:31 UTC](https://community.thinlinc.com/t/disable-password-authentication-for-web-access/590/4 "2023-04-03T07:31:34Z")

</div>

Yes, of course! 🙂

```auto
$ sudo systemctl stop tlwebaccess
$ sudo systemctl disable tlwebaccess

```

Best regards,  
Martin