Re: SSH permits root-Logins with wrong password

2004-06-17 Thread Hamilton Coutinho
On Wed, Jun 16, 2004 at 05:43:32PM +0200, Frank Niedermann wrote: > > If I try to use 'x' as wrong password, ssh won't let me in: > [EMAIL PROTECTED]'s password: > Permission denied (publickey,password,keyboard-interactive). > > Just as I would expect it. If I use a longer or similar password as

Re: SSH permits root-Logins with wrong password

2004-06-16 Thread Carl Fink
I hate to ask, but: have you checked the MD5 sum for sshd? For the PAM library? -- Carl Fink [EMAIL PROTECTED] Jabootu's Minister of Proofreading http://www.jabootu.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PRO

Re: SSH permits root-Logins with wrong password

2004-06-16 Thread Frank Niedermann
On 2004-06-16 at 16:02:59, Andrew Perrin wrote: > > >> > I have a Debian testing server on my network with OpenSSH running. > > >> > If I try to log in as root but with wrong password I get access... > Quick questions: > (1) how long is the password?; and > (2) is the variation you're trying at th

Re: SSH permits root-Logins with wrong password

2004-06-16 Thread Andrew Perrin
On Wed, 16 Jun 2004, Frank Niedermann wrote: > > On Wed, 16 Jun 2004 10:35:33 Patrick Lane <[EMAIL PROTECTED]> wrote: > > >> > I have a Debian testing server on my network with OpenSSH running. > >> > If I try to log in as root but with wrong password I get access... > > > tried to duplicate this

Re: SSH permits root-Logins with wrong password

2004-06-16 Thread Frank Niedermann
On Wed, 16 Jun 2004 10:35:33 Patrick Lane <[EMAIL PROTECTED]> wrote: >> > I have a Debian testing server on my network with OpenSSH running. >> > If I try to log in as root but with wrong password I get access... > tried to duplicate this on a sid box and a sarge box (that hasn't been > upgraded

Re: SSH permits root-Logins with wrong password

2004-06-16 Thread Patrick Lane
I tried to duplicate this on a sid box and a sarge box (that hasn't been upgraded for awhile). I couldn't duplicate your results. The sid box has ii ssh3.8.1p1-4 Secure rlogin/rsh/rcp replacement (OpenSSH and the sarge box has ii ssh3.6.1p2-3 Secure rlogin/r

SSH permits root-Logins with wrong password

2004-06-16 Thread Frank Niedermann
Hello, I have a Debian testing server on my network with OpenSSH running. If I try to log in as root but with wrong password I get the following: [EMAIL PROTECTED] deniedfr $ ssh [EMAIL PROTECTED] Password: Password: Password: [EMAIL PROTECTED]'s password: Last login: Wed Jun 16 17:03:11 2004