-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
We recently found that a change to SSHv2 protocol they change the syntax that disabled passwd authentication in the sshd_config. Our prefered default behavior in AWS and GCE is to not allow passwd authentication by default. In Azure unfortunately they require us to keep password authentication enabled. I propose that for Google and AWS we do a regression test to validate that Password auth in SSH is disabled. The following is my proposal.
Log in create a user susesshpasswdtest and set a random base64 hash as the password.
Try to log in with susesshpasswdtest and password. Success is failure
Log in and set passwd -d susesshpasswdtest
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels