Project

General

Profile

Bug #691

Unchecking 'Disable password login for Secure Shell (RSA key only)' Required Reboot to Apply

Added by Steve Vigneau almost 9 years ago. Updated almost 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Operating System
Target version:
Start date:
06/23/2010
Due date:
% Done:

100%

Estimated time:
Affected Version:
2.0
Affected Architecture:

Description

During some testing I checked 'Disable password login for Secure Shell (RSA key only)' and clicked Save, and sshd restarted as expected, no longer accepting passwords. Once done with this testing I unchecked the box and hit save, but the PasswordAuthentication option did not get set until a restart.

For reference, this is the /etc/ssh/sshd_config after unchecking the box and clicking save:

$ cat /etc/ssh/sshd_config
  1. This file is automatically generated at startup
    Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
    PermitRootLogin yes
    Compression yes
    ClientAliveInterval 30
    UseDNS no
    X11Forwarding no
  2. Login via Key only
    PasswordAuthentication no
    ChallengeResponseAuthentication no
    PubkeyAuthentication yes
  3. override default of no subsystems
    Subsystem sftp /usr/libexec/sftp-server
    Protocol 2
    Port 22

After reboot:

$ cat /etc/ssh/sshd_config
  1. This file is automatically generated at startup
    Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
    PermitRootLogin yes
    Compression yes
    ClientAliveInterval 30
    UseDNS no
    X11Forwarding no
  2. Login via Key and Password
    PasswordAuthentication yes
    ChallengeResponseAuthentication yes
    PubkeyAuthentication yes
  3. override default of no subsystems
    Subsystem sftp /usr/libexec/sftp-server
    Protocol 2
    Port 22

This is on:

2.0-BETA3
built on Wed Jun 23 04:36:23 EDT 2010
FreeBSD 8.1-RC1

Associated revisions

Revision 56c91631 (diff)
Added by Ermal Luçi almost 9 years ago

Pass correct argument to killbyname and correctly check for sshdkeyonly toggle. Ticket #691

Revision 09ba7f74 (diff)
Added by Jim Pingle almost 9 years ago

Fix this test, properly test if a variable is set. Fixes #691

History

#1 Updated by Chris Buechler almost 9 years ago

  • Target version set to 2.0

#2 Updated by Ermal Luçi almost 9 years ago

  • Status changed from New to Feedback

#3 Updated by Chris Buechler almost 9 years ago

  • Status changed from Feedback to New

no change

#4 Updated by Jim Pingle almost 9 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

#5 Updated by Chris Buechler almost 9 years ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF