X-Spam-Check-By: sourceware.org Date: Wed, 23 Nov 2005 16:37:28 -0500 From: Christopher Faylor To: cygwin@cygwin.com Subject: Re: Is there a default ssh password if no Windows password is present? Message-ID: <20051123213728.GB2952@trixie.casa.cgf.cx> Reply-To: cygwin@cygwin.com References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.11 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com On Wed, Nov 23, 2005 at 04:30:59PM -0500, Jerry Moody wrote: >Corinna Vinschen wrote: >>On Nov 23 16:09, Dave Korn wrote: >>> Jerry Moody wrote: >>>>Is there a default ssh password if no Windows password is present? >>>>When I attempt to ssh into a WinXP machine with no Windows account >>>>password, I still get prompted for a password and I can't seem to guess >>>>what it is (null, anonymous, etc don't seem to work). I have set up >>>>autentication keys and ssh is successful, but I want to be certain that >>>>there isn't a default password that I don't know about which would open >>>>my system up to the world. >>> >>>You aren't allowed to log in to a passwordless account from the network >>>in any version of Windows since XP. Is that perhaps the problem? >> >>...or the default setting of sshd: >> >>PermitEmptyPasswords no > >I believe "PermitEmptyPasswords no" is the solution. Unfortunately, >this keyword doesn't show in Cygwin's man pages for sshd, Try the man pages for the file that you'd have to modify: sshd_config. cgf -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/