SSH Password Authorization Tweak Issue

Answered

ajay augustine

• August 15, 2024 09:07

If i use Disable password auth using SSH Password Authorization Tweak, i  still can access via password. its not disables what can i do.

• 

  ajay augustine

  • August 15, 2024 09:10

  My OS and Cpanel version

  AlmaLinux v9.4.0 STANDARD standard

  cPanel Version 120.0.15

  0
• 

  cPRex Jurassic Moderator

  • August 15, 2024 14:21

  Hey there!  Thanks for reporting this - I confirmed this behavior on a test machine and it would appear that the WHM >> SSH Password Authorization Tweak page doesn't work properly at this time.  I have created case CPANEL-45804 with our developers so they can look into this, although I don't have a workaround at this time.

  If I hear any updates on my end I'll be sure to let you know!

  0
• 

  quietFinn

  • August 15, 2024 14:31

  Does this occur only in AlmaLinux 9?
  I checked this in an AlmaLinux 8 server and it changed PasswordAuthentication & ChallengeResponseAuthenticatio to no in /etc/ssh/sshd_config

   

   

  0
• 

  cPRex Jurassic Moderator

  • August 15, 2024 14:32

  Yes, this is only on version 9 - my version 8 test machines all worked just fine.

  0
• 

  ajay augustine

  • August 16, 2024 00:58

  currently i enabled PermitRootLogin prohibit-password, so it does not authenticate with password only via private key.

  0
• 

  ajay augustine

  • September 18, 2024 08:01

  any updates on this

  0
• 

  cPRex Jurassic Moderator

  • September 18, 2024 13:19

  I see it's been assigned to a development team, but I don't have any other updates at this time.

  0
• 

  cPRex Jurassic Moderator

  • November 20, 2024 17:54

  UPDATE - this is fixed in the following versions:

  126.1.1
  124.0.2
  122.0.21
  118.0.21

  so every major version should no longer have this issue!

  0

Please sign in to leave a comment.