X-Spam-Check-By: sourceware.org
Message-ID: <46AE3E1A.1000807@Hipp.com>
Date: Mon, 30 Jul 2007 14:38:02 -0500
From: Michael Hipp <Michael AT Hipp DOT com>
User-Agent: Thunderbird 2.0.0.5 (Windows/20070716)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: sshd: public key working, but can't get passwords working
References: <p06240802c2d24b662020@[192.168.1.8]> <f8ite8$at$1 AT sea DOT gmane DOT org> <p06240801c2d2ab3c9626@[192.168.1.8]> <f8j7aq$qja$1 AT sea DOT gmane DOT org> <p06240802c2d2de2f403a@[192.168.1.8]> <f8jbjd$4uc$1 AT sea DOT gmane DOT org> <p06240804c2d3961da325@[192.168.1.8]> <46ADE970 DOT 7010000 AT Hipp DOT com> <f8kte2$b8b$1 AT sea DOT gmane DOT org>
In-Reply-To: <f8kte2$b8b$1@sea.gmane.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Thorsten Kampe wrote:
> * Michael Hipp (Mon, 30 Jul 2007 08:36:48 -0500)
>> Daniel Griscom wrote:
>>> At 7:32 PM -0500 7/29/07, René Berber wrote:
>>>> Back to the original problem: did you use ssh-user-config?  (I guess 
>>>> What you reported about the log is simple, the password used is not 
>>>> correct...
>>>> it should prompt you 3 times and then close the connection; or the 
>>>> configuration
>>>> does not allow password authentication, let's check this last one:
>>>>
>>>> In /etc/sshd_config you should have:
>>>>
>>>> #PasswordAuthentication yes
>>>> #PermitEmptyPasswords no
>>>> #UsePAM no
>>> All three lines are present and commented out (as above).
>> I thought you were trying to use public/private key authentication, not 
>> password authentication?
>>
>> If so, then the first line above needs to be uncommented and changed to 
>> 'no'.
> 
> No, password authentication and public are not mutually exlusive. The 
> default is fine.

I didn't say they were. But since he's trying to use public/private key 
authentication then he probably wouldn't want password authentication 
available as an attack vector. Check your auth logs sometime and notice 
how common are attacks against port 22 using dictionaries and common 
account names.

Michael

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/