[Bug 4053] New: Allow `MaxAuthTries` to be unlimited.

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=4053

            Bug ID: 4053
           Summary: Allow `MaxAuthTries` to be unlimited.
           Product: Portable OpenSSH
           Version: 10.2p1
          Hardware: All
               URL: https://powerusers.codidact.com/posts/296987
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-agent
          Assignee: unassigned-bugs at mindrot.org
          Reporter: s7c5zclm at beedellroke.addy.io

My environment is `openssh-server-10.2p1-16.fc44`.

Currently, I do not believe that
`file:///etc/ssh/sshd_config:~:text=MaxAuthTries` is able to be
unlimited. Rather, it must be a positive integer.

(Certainly, that is the undisputed premise of
https://powerusers.codidact.com/posts/296987, wherein I have requested
explicit confirmation that this is impossible, if of use.)

To my knowledge, `MaxAuthTries 0` should be suitable for this, because
surely no use case for actually having the SSH Agent active, but unable
to employ its stored credentials, exists.

For servers that do not rate limit this, with users with many keys,
this would be useful. Although ⋛ `MaxAuthTries 65535` is feasible,
configuring a parameter to be a large value is rarely an ideal solution
to any problem.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.