Re: bin/32313: sshd 'PasswordAuthentication no' silently fails

[Matthew Mondor <mm_lists%pulsar-zone.net@localhost>]

The following reply was made to PR bin/32313; it has been noted by GNATS.

From: Matthew Mondor <mm_lists%pulsar-zone.net@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: bin/32313: sshd 'PasswordAuthentication no' silently fails
Date: Fri, 24 Apr 2009 14:16:34 -0400

 I could put in a few minutes testing if
 
 UsePAM no
 PasswordAuthentication no
 
 works and can confirm it does on netbsd-5.  Although this does not seem
 like a proper fix, it might be good to at least document this in a
 comment in /etc/ssh/sshd_config and/or in sshd_config(5)...
 
 As it is, this could be considered to affect security, as an unknowing
 admin might simply disable password authentication as usual to only
 allow public key authentication, and think it works out-of-the-box,
 without performing a test.
 -- 
 Matt