Re: openSSH, SecureCRT, RSA

From: Oliver Soong (ov2k_at_yahoo.com)
Date: 12/23/04 

Date: Thu, 23 Dec 2004 02:18:45 -0500

Sorry. I seem to have left out some important indications of time.

Before I connect using SecureCRT and RSA, everything works as normal (3rd
party can't get in). After authenticating with SecureCRT and RSA, anybody
can sign in, even without the appropriate key.

The behavior is key specific. If I generate two keys and include them both
in my authorized_keys file, and log in with SecureCRT, I can fix the problem
by deleting the key I signed in with.

And yes, the account has a password, and no, PermitEmptyPasswords is set to
no.

Oliver