Bug#1095922: openssh-server: sshd -T still show a deprecated alias: without-password

Patrice Duroux <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <173947702682.9667.4232360568047209915.reportbug__40885.8504191571$1739477190$gmane$org@kos-moceratops>
Package: openssh-server
Version: 1:9.9p1-3
Severity: wishlist

Dear Maintainer,

Currently, here is what sshd says on my system:

$ grep -i root /etc/ssh/sshd_config ; echo "---" ; sshd -V ; sshd -T | grep -i
root
#PermitRootLogin prohibit-password
# the setting of "PermitRootLogin prohibit-password".
#ChrootDirectory none
---
OpenSSH_9.9p1 Debian-3, OpenSSL 3.4.1 11 Feb 2025
permitrootlogin without-password
chrootdirectory none

Regarding https://man.openbsd.org/sshd_config#PermitRootLogin, the default is:
prohibit-password
and not its deprecated alias:
without-password

Could this be an oversight?

Regards,
Patrice


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-server depends on:
ii  adduser                    3.137
ii  debconf [debconf-2.0]      1.5.89
ii  init-system-helpers        1.68
ii  libaudit1                  1:4.0.2-2+b1
ii  libc6                      2.40-6
ii  libcom-err2                1.47.2-1
ii  libcrypt1                  1:4.4.38-1
ii  libgssapi-krb5-2           1.21.3-4
ii  libkrb5-3                  1.21.3-4
ii  libpam-modules             1.7.0-3
ii  libpam-runtime             1.7.0-3
ii  libpam0g                   1.7.0-3
ii  libselinux1                3.8-3
ii  libssl3t64                 3.4.1-1
ii  libwrap0                   7.6.q-35
ii  openssh-client             1:9.9p1-3
ii  openssh-sftp-server        1:9.9p1-3
ii  procps                     2:4.0.4-7
ii  runit-helper               2.16.4
ii  sysvinit-utils [lsb-base]  3.14-1
ii  ucf                        3.0049
ii  zlib1g                     1:1.3.dfsg+really1.3.1-1+b1

Versions of packages openssh-server recommends:
ii  libpam-systemd [logind]  257.2-3
ii  ncurses-term             6.5+20250125-2
ii  xauth                    1:1.1.2-1.1

Versions of packages openssh-server suggests:
pn  molly-guard   <none>
pn  monkeysphere  <none>
pn  ssh-askpass   <none>
pn  ufw           <none>

-- debconf information excluded
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.