https://bugzilla.mindrot.org/show_bug.cgi?id=2270
Bug ID: 2270
Summary: AuthenticationMethods - partial success is considered
as failure
Product: Portable OpenSSH
Version: 6.6p1
Hardware: Other
OS: Linux
Status: NEW
Severity: normal
Priority: P5
Component: sshd
Assignee: [email protected]
Reporter: [email protected]
Created attachment 2468
--> https://bugzilla.mindrot.org/attachment.cgi?id=2468&action=edit
don't increment failures in case of partial success
sshd logs auth failure even if there was no failed attempt in
authenticationthat when using AuthenticationMethods, see logs:
debug3: userauth_finish: failure partial=0 next methods="password"
[preauth]
debug1: userauth-request for user plautrba service ssh-connection
method password [preauth]
debug1: attempt 1 failures 0 [preauth]
...
debug3: userauth_finish: failure partial=1 next methods="publickey"
[preauth]
debug1: userauth-request for user plautrba service ssh-connection
method publickey [preauth]
debug1: attempt 2 failures 1 [preauth]
The problem is in the auth2.c code which doesn't take into account
partial success and increments authctxt->failures as authenticated is
set to 0.
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
