Bug #60024 SSH Administration password authentication uses pub keys

• Submitted: 8 Feb 2011 23:15
• Modified: 27 Mar 2012 23:38
• Reporter: Rowan Wookey
• Status: Closed
• Category: MySQL Workbench: Administration
• Severity: S3 (Non-critical)
• Version: 5.2.31
• OS: MacOS (10.6.6)
• CPU Architecture: Any
• Tags: ssh

[8 Feb 2011 23:15] Rowan Wookey

Description:
When trying to administer a server via ssh using password authentication workbench uses all pubkeys in ~/.ssh before trying the password, so if the user has more ssh keys than the server has authentication attempts the server will reject the authentication before the password is even tried.

How to repeat:
Attempt to connect to a server via ssh with more ssh keys in ~/.ssh than the server allows authentication attempts.

Suggested fix:
Use PubKeyAuthentication=no on ssh connections without a pub key.

[27 Mar 2012 23:38] Philip Olson

Fixed as of 5.2.39, and here's the changelog entry:

Password-based SSH authentication would still check the
key-based authentication files within ".ssh/"
before prompting for a password.