Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(On the same host) being able to autologin even if SSH is configured with PasswordAuthentication no #509

Open
distributev opened this issue Oct 3, 2023 · 0 comments

Comments

@distributev
Copy link

Hello,

Thank you for wetty which is indeed a very useful tool.

In the documentation, for the auto-login to work, I read 'For auto-login feature you’ll need sshpass installed'

The fact that sshpass is a requirement for autologin implies that autologin will not work when SSH has 'PasswordAuthentication no' on the server. PasswordAuthentication no for SSH is a best practice found on every 'First 5 Minutes on Setup Linux Server Security' guide'.

Is my understanding correct that wetty autologin does not work when SSH is configured with PasswordAuthentication no?

Would it be possible to have PasswordAuthentication no but still use Wetty autologin? I mean in Linux it is possible to do SSH login using public/private key only (when PasswordAuthentication no) but still the users could have passwords configured which they can use when they do normal terminal logins (not SSH) - wetty, being installed on the server, could verify the user/password like a normal terminal login and thus enabling autologin even if SSH has 'PasswordAuthentication no'. Basically instead of using sshpass to verify the user/password just verify the same directly on the linux host where wetty is installed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant