Bug#248747: [Fwd: Re: minor: no delay for root login with PermitRootLogin no]
Please find below the answer I received from openssh devs:
Date: Mon, 10 May 2004 11:07:52 +1000
From: Darren Tucker <dtucker@zip.com.au>
To: thoane@altern.org
CC: openssh@openssh.com
Subject: Re: minor: no delay for root login with PermitRootLogin no
References: <200405091751.i49HphaM029482@cvs.openbsd.org>
In-Reply-To: <200405091751.i49HphaM029482@cvs.openbsd.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Status:
thoane@altern.org wrote:
> OpenSSH_3.8p1 Debian 1:3.8p1-3, SSH protocols 1.5/2.0, OpenSSL 0.9.7d
17 Mar 2004
> # sshd -V 2>&1 | grep version
> sshd version OpenSSH_3.8p1 Debian 1:3.8p1-3, OpenSSL 0.9.7d 17 Mar 2004
>
> My sshd is configured to refuse root login with the configuration key:
> PermitRootLogin no
> I mean, there isn't any "sleep time" like it's the case when I enter
a bad password.
For a bad password, the delay is provided by PAM. If you want root to
behave the same way even for a correct password you need to arrange for
PAM to do it (eg in the sshd session stack) and not use PermitRootLogin.
This is not an OpenSSH problem as such, the Debian folks would be in a
much better position to help you.
Reply to: