Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Feb 2007 16:19:24 +0000
From:      Alex Zbyslaw <xfb52@dial.pipex.com>
To:        Olaf Greve <o.greve@axis.nl>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: [SOLVED] Help please: how to enable SSH password authentication under FreeBSD 6.2? Solved - but not in an expected way
Message-ID:  <45D1E50C.5000409@dial.pipex.com>
In-Reply-To: <45D1DBA8.5040400@axis.nl>
References:  <45D07D5A.2040307@axis.nl>	<8930024.post@talk.nabble.com>	<45D1BDCA.8050709@axis.nl>	<20070213090410.c1aa29bc.wmoran@collaborativefusion.com> <45D1DBA8.5040400@axis.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
Olaf Greve wrote:

>
> The issue is that PuTTY does not fall back from its SSH2 attempt to 
> SSH1 (with password authentication), as is what I specified in my 
> /etc/ssh/sshd_config
>
> Is this what you tried too, or did you use SSH2 (i.e. key 
> authentication, instead of password authentication)?

Unless I misunderstand, then you have a serious misapprehension.  SSH1 
versus SSH2 is *nothing* to do with keys versus passwords.  Both SSH1 
and SSH2 support password or key based authentication.  The difference 
is that SSH1 an older protocol and is *insecure* and no-one should still 
be using it unless they have some legacy app which really cannot be updated.

I strongly suggest that at the very least you enable SSH2 as the first 
protocol in sshd_config with a line like

Protocol 2,1

though from what I can see, SSH2 only has been the default for a while, 
and rightly so.

--Alex





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45D1E50C.5000409>