When using the latest 24.04 server installer, it will ask if you want to
opt in to ssh. On opt in, the installer selects "Allow password
authentication over SSH" automatically, and can only be turned off if
the user provides a key.

So, between sshd_config (5) and subiquity's documentation, I no longer
believe this is wholly unexpected. We should still work to resolve this.
I like Marc's suggestion of avoiding sshd_config.d all together. If we
keep sshd_config.d, a warning in /etc/ssh/sshd_config would be nice.

(Are there other creative solutions to this? sshd_config's conditional
Match blocks don't seem to help here.)

** Attachment added: "ubuntu-24.04.1-server-install-with-ssh-no-keys.png"
   
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/2088207/+attachment/5837298/+files/ubuntu-24.04.1-server-install-with-ssh-no-keys.png

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2088207

Title:
  cloud-init enables ssh password auth in an unexpected config file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/2088207/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to