Solved FreeBSD's built-in OpenSSH configuration does not work.

sdf

Active Member

Reaction score: 3
Messages: 170

Hello,

When I tested FreeBSD's built-in OpenSSH, I found that these two parameter configurations don't seem to work.

PasswordAuthentication no
PermitEmptyPasswords no

The client can still log in with a password and a blank password. Why?


FreeBSD 11.2
 

VladiBG

Aspiring Daemon

Reaction score: 243
Messages: 602

Because ChallengeResponseAuthentication is enabled.

sshd_config(5)

edit:
when you change your config you need to restart the sshd. If you want to block empty passwords then your configuration should work.
 
  • Thanks
Reactions: sdf
Top