This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: sshd permits logon using disabled user?
- From: Stefan Baur <X2Go-ML-1 at baur-itcs dot de>
- To: cygwin at cygwin dot com
- Date: Thu, 24 Jan 2019 20:22:05 +0100
- Subject: Re: sshd permits logon using disabled user?
- References: <CANV9t=SSyof86c5Yz3tNhwj4To=eKnrmveQcr59ZmMY-X9_txA@mail.gmail.com> <20190124154533.GK2802@calimero.vinschen.de> <CANV9t=RtGmpkogw0J7oCME+f4GNkeWo=QSJZFA_jOqyBxPLLdw@mail.gmail.com> <1b1ba104-977f-7297-6d8e-1b456acae305@baur-itcs.de> <CANV9t=RKcVJX8=NuenDaHDq79CMkT--yerjEZwiPtk+5DtxOBQ@mail.gmail.com> <CAHSx_Su2bB-5cPRkDqGXEpPwmfP_h_=zryDRt9pK0kr5uGDCcg@mail.gmail.com>
Am 24.01.19 um 20:17 schrieb Wayne Davison:
>> I don't think Windows natively supports password-free logons using only key
>> files (but I might be wrong about that).
> Don't forget that sshd_config fully supports disabling passwords. You
> can turn a password off for a single user via:
>
> Match User foobar
> PasswordAuthentication no
>
> Or set the "PasswordAuthentication no" as the default for all users.
Yes, but that will still allow the user to log in with their password
when they have access to the local screen and keyboard, or the machine
is reachable via RDP or CIFS, for example.
Kind Regards,
Stefan Baur
--
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple