Re: SSH Password Authentication

From: Darren Tucker (dtucker_at_gate.dodgy.net.au)
Date: 11/19/05 

Date: 19 Nov 2005 03:19:42 GMT

On 2005-11-18, Sascha Kaddatz <ssh.100.rendryn@spamgourmet.com> wrote:
> I logged in from SUSE 9.3 Server via my shell to a UNIX Backup Server.
> The authentication method is with a password. After the first login, I
> never was asked again for the password on the UNIX Backup Server. The
> log in worked without any authentication!! Is there something like a
> password cache? I use OpenSSH.

Not as such, no. There are however several authentication methods which
will allow you access without asking you for a password. You can see which
is being used by using the "-v" option to ssh.

It's also possible to misconfigure your system such that no authentication
is required (eg by messing with the PAM config files, or setting an
empty password and enabling PermitEmptyPasswords in sshd_config). 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • SSH Password Authentication
    ... I logged in from SUSE 9.3 Server via my shell to a UNIX Backup Server. ... The authentication method is with a password. ... After the first login, I ...
    (comp.security.ssh)
  • Re: Forcing new password at login (w/o requiring an old password) (sudo related)
    ... If you're using PAM then the user will be forced to set a new password ... when the existing one expires regardless of the authentication method. ... the user can sudo w/o additional authentication even ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Status of pam-1@ssh.com authentication in OpenSSH?
    ... method which OpenSSH does not understand. ... The best solution would be to have your employer allow a standard ... authentication method in addition to the vendor- ... Good judgement comes with experience. ...
    (comp.security.ssh)