From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 68064 invoked by alias); 24 Jan 2019 19:17:20 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 67986 invoked by uid 89); 24 Jan 2019 19:17:19 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=passwords, Hx-spam-relays-external:ESMTPA X-HELO: palegreen.birch.relay.mailchannels.net Received: from palegreen.birch.relay.mailchannels.net (HELO palegreen.birch.relay.mailchannels.net) (23.83.209.140) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 24 Jan 2019 19:17:18 +0000 X-Sender-Id: dreamhost|x-authsender|dropbox@opencoder.net Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 9DFC35C5817 for ; Thu, 24 Jan 2019 19:17:15 +0000 (UTC) Received: from pdx1-sub0-mail-a75.g.dreamhost.com (unknown [100.96.11.179]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 0FCA65C57DB for ; Thu, 24 Jan 2019 19:17:15 +0000 (UTC) X-Sender-Id: dreamhost|x-authsender|dropbox@opencoder.net Received: from pdx1-sub0-mail-a75.g.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.16.2); Thu, 24 Jan 2019 19:17:15 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|dropbox@opencoder.net X-MailChannels-Auth-Id: dreamhost X-Stupid-Power: 4d08057a43e45e77_1548357435175_568762150 X-MC-Loop-Signature: 1548357435175:817290486 X-MC-Ingress-Time: 1548357435175 Received: from pdx1-sub0-mail-a75.g.dreamhost.com (localhost [127.0.0.1]) by pdx1-sub0-mail-a75.g.dreamhost.com (Postfix) with ESMTP id A2665807BC for ; Thu, 24 Jan 2019 11:17:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=opencoder.net; h= mime-version:references:in-reply-to:from:date:message-id:subject :to:content-type; s=opencoder.net; bh=4q56YcFmvDKMESZMjzBxrxmp2K A=; b=qW+GmmOHM5IjKQ2cxoJlUwFk8bClmx8TSjKRMMBtDxSo9fJUPJPLjwXBWZ duLY9+v8XNC9DGPfsgwgpsTQ5K5eJOGUNan+eaV0w4EUynpZ35/TzmAfN70fA7y7 K0ghLH9DdQGfiBtPxr77qcbgjHVmi+Ed9kWD4lQsCj3t90D4Y= Received: from mail-io1-f50.google.com (mail-io1-f50.google.com [209.85.166.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dropbox@opencoder.net) by pdx1-sub0-mail-a75.g.dreamhost.com (Postfix) with ESMTPSA id 67CFD807B1 for ; Thu, 24 Jan 2019 11:17:14 -0800 (PST) Received: by mail-io1-f50.google.com with SMTP id m19so5715356ioh.3 for ; Thu, 24 Jan 2019 11:17:14 -0800 (PST) MIME-Version: 1.0 References: <20190124154533.GK2802@calimero.vinschen.de> <1b1ba104-977f-7297-6d8e-1b456acae305@baur-itcs.de> In-Reply-To: X-DH-BACKEND: pdx1-sub0-mail-a75 From: Wayne Davison Date: Thu, 24 Jan 2019 19:17:00 -0000 Message-ID: Subject: Re: sshd permits logon using disabled user? To: cygwin Content-Type: text/plain; charset="UTF-8" X-VR-OUT-STATUS: OK X-VR-OUT-SCORE: 0 X-VR-OUT-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedtledriedvgdduvddvucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuggftfghnshhusghstghrihgsvgdpffftgfetoffjqffuvfenuceurghilhhouhhtmecufedttdenucenucfjughrpeggfhgjhfffkffuvfgtsehttdertddttdejnecuhfhrohhmpeghrgihnhgvucffrghvihhsohhnuceofigrhihnvgesohhpvghntghouggvrhdrnhgvtheqnecukfhppedvtdelrdekhedrudeiiedrhedtnecurfgrrhgrmhepmhhouggvpehsmhhtphdphhgvlhhopehmrghilhdqihhouddqfhehtddrghhoohhglhgvrdgtohhmpdhinhgvthepvddtledrkeehrdduieeirdehtddprhgvthhurhhnqdhprghthhephggrhihnvgcuffgrvhhishhonhcuoeifrgihnhgvsehophgvnhgtohguvghrrdhnvghtqedpmhgrihhlfhhrohhmpeifrgihnhgvsehophgvnhgtohguvghrrdhnvghtpdhnrhgtphhtthhopegthihgfihinhestgihghifihhnrdgtohhmnecuvehluhhsthgvrhfuihiivgeptd X-IsSubscribed: yes X-SW-Source: 2019-01/txt/msg00214.txt.bz2 On Thu, Jan 24, 2019 at 10:13 AM Bill Stewart wrote: > I don't think Windows natively supports password-free logons using only key > files (but I might be wrong about that). Don't forget that sshd_config fully supports disabling passwords. You can turn a password off for a single user via: Match User foobar PasswordAuthentication no Or set the "PasswordAuthentication no" as the default for all users. ..wayne.. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple