- name: Turn off password authentication
  become: true
  replace:
    path: /etc/ssh/sshd_config
    regexp: "PasswordAuthentication yes"
    replace: "PasswordAuthentication no"

- name: Turn off challenge response authentication
  become: true
  replace:
    path: /etc/ssh/sshd_config
    regexp: "ChallengeResponseAuthentication yes"
    replace: "ChallengeResponseAuthentication no"

- name: Turn off GSSAPI authentication
  become: true
  replace:
    path: /etc/ssh/sshd_config
    regexp: "GSSAPIAuthentication yes"
    replace: "GSSAPIAuthentication no"