Displaying 1 result from an estimated 1 matches for "goodkey".
Did you mean:
goodey
2008 May 22
6
[Bug 1468] New: sshd does not log failed attempts using key-based authentication only
...I just built SSH-2.0-OpenSSH_5.0 on Fedora Core 4 with no configure
options (./configure; make) and again there is no logging
$ ./ssh -p 8022 -o PasswordAuthentication=no -i badkey localhost
Permission denied (publickey,password).
- no log entry
$ ./ssh -p 8022 -o PasswordAuthentication=no -i goodkey localhost
- login successful
- syslog entry: sshd[6987]: Accepted publickey for andrew from
127.0.0.1 port 39492 ssh2
The Debian exploit tries an average of 32,000 keys with no evidence in
syslog apart from an entry on success.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs...