.. _example_service_ssh_match_matchroledisable-password-authentication:

##########################################
Match Role Disable-Password-Authentication
##########################################

SSH connection test with match role disable-password-authentication
configuration. Tests that SSH server correctly blocks password authentication
only for users with admin role while allowing it for monitor and operator roles.

******************************************
SSH Match Role Admin Disable Password Auth
******************************************

Description
===========

Test SSH match role with disable-password-authentication for admin role only.
``Admin user`` should ``fail to connect``, while ``monitor`` and ``operator`` users should ``succeed``.

Scenario
========

.. include:: matchroledisable-password-authentication/sshmatchroleadmindisablepasswordauth

.. raw:: html

  <hr>

********************************************
SSH Match Role Monitor Disable Password Auth
********************************************

Description
===========

Test SSH match role with **disable-password-authentication** for ``monitor`` role only.
``Monitor user`` should ``fail to connect``, while ``admin`` and ``operator`` users should ``succeed``.

Scenario
========

.. include:: matchroledisable-password-authentication/sshmatchrolemonitordisablepasswordauth

.. raw:: html

  <hr>

*********************************************
SSH Match Role Operator Disable Password Auth
*********************************************

Description
===========

Test SSH match role with **disable-password-authentication** for ``operator`` role only.
Operator user should ``fail to connect``, while admin and monitor users should ``succeed``.

Scenario
========

.. include:: matchroledisable-password-authentication/sshmatchroleoperatordisablepasswordauth

.. raw:: html

  <hr>