Mailing List Archive

[Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam'
http://bugzilla.mindrot.org/show_bug.cgi?id=701

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Severity|normal |enhancement





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam' [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=701

sascha-openssh-bugs@silbe.org changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |sascha-openssh-
| |bugs@silbe.org



------- Additional Comments From sascha-openssh-bugs@silbe.org 2004-04-20 09:42 -------
For the time being, please at least add an appropriate note to sshd_config. I'm glad I tested whether setting "PermitRoot without-password" really works.
It took me quite some time to figure out WTF was happening.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam' [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From dtucker@zip.com.au 2004-04-20 09:48 -------
The warning has already been added and is in 3.8.1p1:

- (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
from bug #701 (text from jfh at cise.ufl.edu).




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam' [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From sascha-openssh-bugs@silbe.org 2004-04-20 09:55 -------
Great! It's even on the master site already. What's the usual mirror update frequency?





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam' [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From dtucker@zip.com.au 2004-04-20 10:14 -------
Don't know (it's probably going to vary depending on the mirror).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.