PuTTY bug ssh1-no-password

This is a mirror. The primary PuTTY web site can be found here.

summary: PuTTY tries password authentication even if the server says not to.
class: bug: This is clearly an actual problem we want fixed.
difficulty: fun: Just needs tuits, and not many of them.
present-in: 0.60 2007-09-20
fixed-in: 2007-09-21 r7724

If SSH_AUTH_PASSWORD is disabled on an SSH-1 server (e.g. by setting
"PasswordAuthentication no" in OpenSSH), and PuTTY isn't configured
to try any other authentication type, it sends a password anyway and
reports that it failed.  It should notice from SSH_MSG_PUBLIC_KEY that
the server doesn't support password authentication, and not attempt it.

Audit trail for this bug.

If you want to comment on this web site, see the Feedback page.
(last revision of this bug record was at 2007-09-20 22:08:31 +0100)