[Bug 3736] sshd falls back to password prompt after PAM module returns a PAM_MAXTRIES.

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Sep 23 17:26:00 AEST 2024


https://bugzilla.mindrot.org/show_bug.cgi?id=3736

--- Comment #3 from thibault.delmas at lxp.lu ---
Hi Daren, thank you for reading me,

# grep -v '#' /etc/ssh-portable/sshd_config | grep -v -e '^$'
KbdInteractiveAuthentication yes
PasswordAuthentication no
AuthenticationMethods publickey,keyboard-interactive:pam
UsePAM yes
SyslogFacility AUTHPRIV
LogLevel DEBUG
PubkeyAuthentication yes
AuthorizedKeysFile      .ssh/authorized_keys

I pasted my ssh config, I was under the impression that 

PasswordAuthentication no

did indeed disable password authentication.

After some more testing, if I use PAM_ABORT exit code instead of
PAM_MAXTRIES, sshd does exist without falling back to a password
prompt.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list