Skip to content

Test is passwd authentication is enabled. #413

@joelgordon

Description

@joelgordon

We recently found that a change to SSHv2 protocol they change the syntax that disabled passwd authentication in the sshd_config. Our prefered default behavior in AWS and GCE is to not allow passwd authentication by default. In Azure unfortunately they require us to keep password authentication enabled. I propose that for Google and AWS we do a regression test to validate that Password auth in SSH is disabled. The following is my proposal.

Log in create a user susesshpasswdtest and set a random base64 hash as the password.
Try to log in with susesshpasswdtest and password. Success is failure
Log in and set passwd -d susesshpasswdtest

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions