Ubuntu
openssh package

'PasswordAuthentication no' has no effect

Bug #21102 reported by Daniel Holth
6
Affects Status Importance Assigned to Milestone
openssh (Ubuntu)
Fix Released
Medium
Colin Watson

Bug Description

I would like to require cryptographic authentication at all times but I cannot.

'PasswordAuthentication no' in /etc/ssh/sshd_config still allows me to log in
with nothing more than a password.

Revision history for this message
Daniel Holth (dholth) wrote :

Bug no longer a problem with 5.10

Revision history for this message
Colin Watson (cjwatson) wrote :

Thanks for re-checking.

Also, you may find 'ChallengeResponseAuthentication no' necessary in some configurations.

Changed in openssh:
status: Unconfirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.