[Bug 2049402] Re: sshd doesn't properly disable KbdInteractiveAuthentication

[Seth Arnold]

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2049402

Title:
  sshd doesn't properly disable KbdInteractiveAuthentication

Status in openssh package in Ubuntu:
  Incomplete

Bug description:
  On 22.04 in OpenSSH_8.9p1 Ubuntu-3ubuntu0.6, OpenSSL 3.0.2 15 Mar 2022
  setting KbdInteractiveAuthentication=no in sshd_config does not
  disable keyboard-interactive authentication. After updating (and
  restarting the sshd service) `sshd -T` still reports
  `kbdinteractiveauthentication yes` attempts to connect to sshd also
  allow keyboard-interactive authentication. Possibly related to
  https://bugs.archlinux.org/task/71941

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2049402/+subscriptions