Skip to content

Refine SSH auth ordering and password fallback#144

Open
shcheklein wants to merge 3 commits intotreeverse:mainfrom
shcheklein:fix-ssh-auth-ordering-kbdint-fallback
Open

Refine SSH auth ordering and password fallback#144
shcheklein wants to merge 3 commits intotreeverse:mainfrom
shcheklein:fix-ssh-auth-ordering-kbdint-fallback

Conversation

@shcheklein
Copy link
Copy Markdown

@shcheklein shcheklein commented Apr 23, 2026

Built on top of #143 and #141


This rewrites the earlier SSH password prompt fix around a narrower, protocol-aware auth selection strategy while keeping the keyboard-interactive password fallback fix.

Changes:

  • limit auth attempts to methods backed by configured credentials
  • prefer password,keyboard-interactive for password-based logins
  • prefer publickey when explicit key material is configured
  • keep configured passwords from falling back to interactive prompts
  • add focused tests for preferred_auth construction

This should address unnecessary publickey/passphrase prompts without breaking servers which expose password login only through keyboard-interactive.

@shcheklein shcheklein force-pushed the fix-ssh-auth-ordering-kbdint-fallback branch 2 times, most recently from 9538b1d to 5794215 Compare April 24, 2026 01:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant