Page 1 of 1

centos6-64:non-existing users over ssh refused without wait?bug or config?

Posted: 2012/08/17 10:50:05
by paja_slovany
hello,
i have some security problems,installed centos 6.3,yum update,change maxauthtries to 1 in sshd_config(going to use pam_abl,not in use yet),with wrong password root waits before disconnect,unknown user(any other) just quick disconnect,that opens security hole to name guessing
if i set maxauthtries to 2,non-existing user gets 1 try and root gets 2(as if those numbers were set for maxauthtries)
so..what now?
paja

centos6-64:non-existing users over ssh refused without wait?

Posted: 2012/08/18 09:20:36
by KermitDaFragger
This is probably a PAM configuration issue, not an SSH configuration issue (unless you have configured SSH not to use PAM).

However instead of fixing your PAM setup if you want real security you are beter off not using passwords. Use public/private keys. See our [url=http://wiki.centos.org/HowTos/Network/SecuringSSH]wiki[/url] on how to set this up.