summary: PuTTY tries password authentication even if the server says not to. class: bug: This is clearly an actual problem we want fixed. difficulty: fun: Just needs tuits, and not many of them. present-in: 0.60 2007-09-20 fixed-in: 2007-09-21 r7724 1e8a5e47960cdb77a1627493d519a1cdf8c5fb3e (0.61)
If SSH_AUTH_PASSWORD is disabled on an SSH-1 server (e.g. by setting
"PasswordAuthentication no" in OpenSSH), and PuTTY isn't configured
to try any other authentication type, it sends a password anyway and
reports that it failed. It should notice from SSH_MSG_PUBLIC_KEY that
the server doesn't support password authentication, and not attempt it.
