X-Spam-Check-By: sourceware.org
Subject: Re: Is there a default ssh password if no Windows password is present?
To: cygwin AT cygwin DOT com
Message-ID: <OF6B7B3393.F34BA1C2-ON852570C2.0074E43D-852570C2.00763186@us.ibm.com>
From: Jerry Moody <jamoody AT us DOT ibm DOT com>
Date: Wed, 23 Nov 2005 16:30:59 -0500
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Corinna Vinschen wrote:
>On Nov 23 16:09, Dave Korn wrote:
>> Jerry Moody wrote:
>> > Is there a default ssh password if no Windows password is present?
When I
>> > attempt to ssh into a WinXP machine with no Windows account password,
I
>> > still get prompted for a password and I can't seem to guess what it is
>> > (null, anonymous, etc don't seem to work).  I have set up
autentication
>> > keys and ssh is successful, but I want to be certain that there isn't
a
>> > default password that I don't know about which would open my system up
to
>> > the world.
>>
>>   You aren't allowed to log in to a passwordless account from the
network in
>> any version of Windows since XP.  Is that perhaps the problem?
>
>...or the default setting of sshd:
>
>  PermitEmptyPasswords no

I believe "PermitEmptyPasswords no" is the solution.  Unfortunately, this
keyword doesn't show in Cygwin's man pages for sshd, and I came up empty
searching the web without knoweldge that the keyword even existed.  Thanks
for the pointer.


Jerry                                          ><IXOYE>



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/