Apply user "Denied login methods" immediately
secretfork opened this issue · comments
Is your feature request related to a problem? Please describe.
In openssh you may configure (for example) password auth and pubkey auth to be allowed globally. In a situation where a user is configured to only allow pubkey auth, he/she will be disconnected immediately when not supplying a pubkey.
When i try the eqvivalent in sftpgo, that is enabling pubkey auth and password auth globally, but denying a user anything but pubkey, i am expecting sftgo to behave roughly the same as openssh (that is, disconnect the user if it can't provide any valid login method immediately). Instead, sftgo asks for password the default number of times and then closes the connection. Of course, in the log i can see password isn't an allowed login method, but it still asks.
Describe the solution you'd like
I think i would rather prefer "Denied login methods" to be applied immediately, like in openssh.
Describe alternatives you've considered
No response
What are you using SFTPGo for?
Professional user, 1 person business
Additional context
No response