Re: SSH 2.4.0/3.0.1 usernames guessable ?

From: Marco van Berkum (m.v.berkumat_private)
Date: Tue Sep 04 2001 - 00:36:27 PDT

  • Next message: Paige, Randall: "RE: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)" 

    quentynat_private wrote:

> you could set
>
>         PasswordGuesses                 3
>
> to 1 (annoying) in the /etc/sshd2/sshd_config
>

Hmm, tried this as well, it gives a connection closed with
a illegal user, and a permission denied with a valid user,
Still guessable (SSH 2.4.0)

grtz,
Marco van Berkum

--
GCC dpu s:--- a- C+++ US++++ P++ L+++ E---- W N o-- K w---
O- M-- V-- PS+++ PE-- Y+ PGP--- t--- 5 X R* tv++ b+++ DI-- D----
G++ e- h+ r y*
+---------------------+------------------+-------------------+
|  Marco van Berkum   |   MB17300-RIPE   | Security Engineer |
|  http://ws.obit.nl  | "Chernobyl used  | Network Admin     |
|  m.v.berkumat_private |     Windows"     |      UNIX         |
+---------------------+------------------+-------------------+

    This archive was generated by hypermail 2b30 : Tue Sep 04 2001 - 08:39:13 PDT