ssh configuration is flawed

[wkhatch@unimar.com]

It’s not possible to set a conduit to disable password auth in sshd config. Typically, I’d disable this, PAM, and challenge response, and just leave public key. I can enable public key auth, but disabling password auth completely shuts down ssh access, and I have to access through the debug port, then revert changes in /etc/ssh/sshd_config to get it back. I see this as a major security concern that needs to be addressed. Or maybe there’s an undocumented process for accomplishing this.

[Jeff Hatch]

Hello,

I think this has to do with assumptions that were made in managing SSH from the Web UI. I have added an enhancement request to support disabling password authentication and supporting public key authentication.

Jeff

[wkhatch@unimar.com]

Awesome, thanks Jeff.

[Author]

Posts