Mailing List Archive: [Bug 1432] MaxAuthTries is not used correctly

https://bugzilla.mindrot.org/show_bug.cgi?id=1432

Darren Tucker <dtucker@zip.com.au> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |dtucker@zip.com.au
Blocks| |1353

--- Comment #1 from Darren Tucker <dtucker@zip.com.au> 2008-01-28 21:25:15 ---
If we change this, perhaps we should also increase the default (and
documentation thereof) so that the default behaviour does not change?
Otherwise this change might result in a number of existing
configurations that currently work showing auth failures after an
upgrade?

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

https://bugzilla.mindrot.org/show_bug.cgi?id=1432

--- Comment #2 from Jan Pechanec <Jan.Pechanec@Sun.COM> 2008-01-29 00:45:52 ---
makes sense. I can see that DEFAULT_AUTH_FAIL_MAX is 6. None, 2
hostbased and 2 pubkey auth tries makes 5 of them. While this won't
break many automated systems (I don't think that many configurations
have more than 2 public keys, for example) it would leave just one try
for password/kbd-interactive auth.

to increase DEFAULT_AUTH_FAIL_MAX to 8 sounds very logical.

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs