I have setup Debian Squeeze on an old laptop to serve as a testbed. I have installed OpenSSH and edited
/etc/ssh/sshd_config to use ssh keys and disallow password authentication.
I am able, however, to login with a password via serFISH.com. On entering the password I get:
Connecting as lemmy@*myipaddress* on port 5001... /root/.ssh/known_hosts updated. Original contents retained as /root/.ssh/known_hosts.old lemmy@my*ipaddress*'s password: Linux saturn 2.6.32-5-686 #1 SMP Sun May 6 04:01:19 UTC 2012 i686 The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. Last login: Sun Aug 26 11:20:12 2012 from 22.214.171.124 lemmy@saturn:~$`
How is this possible?