openssh bugs - Mar 2004 - [Bug 701] With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam'

http://bugzilla.mindrot.org/show_bug.cgi?id=701

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |iand at ekit-inc.com



------- Additional Comments From dtucker at zip.com.au  2004-03-30 12:00 -------
*** Bug 713 has been marked as a duplicate of this bug. ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |822
              nThis|                            |
             Status|NEW                         |ASSIGNED
            Version|3.7.1p1                     |-current



------- Additional Comments From dtucker at zip.com.au  2004-03-30 12:08 -------
The current plan is to switch away from the current "without-password"
to a
positive list of allowed methods, e.g.

	PermitRootLogin pubkey,hostbased,keyboard-interactive

and keep "without-password" as an alias
for something like
	"pubkey,hostbased"

One thing that isn't clear is whether or not keyboard-interactive should
specify
the specific "devices", eg keyboard-interactive/pam.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|normal                      |enhancement





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701

sascha-openssh-bugs at silbe.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sascha-openssh-
                   |                            |bugs at silbe.org



------- Additional Comments From sascha-openssh-bugs at silbe.org  2004-04-20
09:42 -------
For the time being, please at least add an appropriate note to sshd_config.
I'm glad I tested whether setting "PermitRoot without-password"
really works.
It took me quite some time to figure out WTF was happening.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From dtucker at zip.com.au  2004-04-20 09:48 -------
The warning has already been added and is in 3.8.1p1:

 - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
   from bug #701 (text from jfh at cise.ufl.edu).




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From sascha-openssh-bugs at silbe.org  2004-04-20
09:55 -------
Great! It's even on the master site already. What's the usual mirror
update frequency?





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=701





------- Additional Comments From dtucker at zip.com.au  2004-04-20 10:14 -------
Don't know (it's probably going to vary depending on the mirror).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.