Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1 - /etc/ssh/sshd_config no longer used? #97

Closed
developedsoftware opened this issue Jul 7, 2022 · 3 comments
Closed

v1 - /etc/ssh/sshd_config no longer used? #97

developedsoftware opened this issue Jul 7, 2022 · 3 comments

Comments

@developedsoftware
Copy link

Just updated to v1 and my config file found at /etc/ssh/sshd_config is no longer being read

(for example disabling password authentication)

@tg123
Copy link
Owner

tg123 commented Jul 7, 2022

sshpiperd never read upstream's /sshd_config

but I think the scenario is the upstream had password disabled and sshpiperd still asks for password.
the reason is in v1, sshpiperd has no idea about upstream before user sends any auth method

To support more complex routing in v1, sshpiper holds the auth and reads more info, publickey, from downstream to determine which upstream to use.
similarly, v1 also support routing by different password.

However, it does not make any sense that sshpiper asks for password if no upstream supports password.
To workaround it, I will add a option to workingdir plugin to disable password globally

Does that work for you?

@developedsoftware
Copy link
Author

developedsoftware commented Jul 7, 2022

Yeah should be fine. My config file is below (works with v0)

AuthenticationMethods being the relevant line here

/etc/ssh/sshd_config

AuthenticationMethods publickey
ChallengeResponseAuthentication no
PasswordAuthentication no
UsePAM no
PermitRootLogin no
PermitRootLogin prohibit-password

@tg123
Copy link
Owner

tg123 commented Jul 7, 2022

fixed in 705c888

@tg123 tg123 closed this as completed Jul 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants