Bug#972091: openssh-client: ssh -o KbdInteractiveAuthentication=no gets ignored

Drexl Johannes <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <160251116274.8207.9011377035662360737.reportbug__13230.180116237$1602511403$gmane$org@badwlrz-cljdr01.ws.lrz.de>
Package: openssh-client
Version: 1:7.9p1-10+deb10u2
Severity: normal

Dear Maintainer,

connecting to a server disabling keyboard-interactive authentication
does not actually disable it; -vvv shows:

debug1: Authentications that can continue: publickey,keyboard-interactive
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred:
debug3: authmethod_is_enabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug3: send packet: type 50
debug2: we sent a keyboard-interactive packet, wait for reply
debug3: receive packet: type 60
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 1
Password:

This should not happen. Guess there's just a minor logic error
somewhere.

-- System Information:
Debian Release: 10.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-11-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-client depends on:
ii  adduser           3.118
ii  dpkg              1.19.7
ii  libc6             2.28-10
ii  libedit2          3.1-20181209-1
ii  libgssapi-krb5-2  1.17-3
ii  libselinux1       2.8-1+b1
ii  libssl1.1         1.1.1d-0+deb10u3
ii  passwd            1:4.5-1.1
ii  zlib1g            1:1.2.11.dfsg-1

Versions of packages openssh-client recommends:
ii  xauth  1:1.0.10-1

Versions of packages openssh-client suggests:
pn  keychain      <none>
pn  libpam-ssh    <none>
pn  monkeysphere  <none>
pn  ssh-askpass   <none>

-- no debconf information
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.