[Bug 263045] sshd allows password logins when "PasswordAuthentication no" is set

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263045

            Bug ID: 263045
           Summary: sshd allows password logins when
                    "PasswordAuthentication no" is set
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: donaldcallen@gmail.com

This is the same error as closed bug 40261 from 20 years ago. Apparently a
regression.

Setting  "PasswordAuthentication no" in /etc/ssh/sshd_config does not disable 
a password logins. To accomplish that, "KbdInteractiveAuthentication no" must
be set ("yes" is the default).

I note that "PasswordAuthentication no" is sufficient to disable password
logins on DragonFlyBSD, which has the same default for
KbdInteractiveAuthentication.

-- 
You are receiving this mail because:
You are the assignee for the bug.