Password
SSH 在正確的密碼字元串後忽略字元？
遠端機器 10.10.10.1 的使用者名為“user”的密碼為“asdFGH12”。即使我在“asdFGH12”字元串後輸入密碼“asdFGH12dasdkjlkjasdus”或任何其他字元，我也能登錄。
$ ssh -v 10.10.10.1 OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Connecting to 10.10.10.1 [10.10.10.1] port 22. debug1: Connection established. debug1: identity file /home/user/.ssh/identity type 0 debug1: identity file /home/user/.ssh/id_rsa type -1 debug1: identity file /home/user/.ssh/id_dsa type 2 debug1: Remote protocol version 1.99, remote software version OpenSSH_4.1 debug1: match: OpenSSH_4.1 pat OpenSSH_4* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.2p1 FreeBSD-20090522 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-ctr hmac-md5 none debug1: kex: client->server aes128-ctr hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host '10.10.10.1' is known and matches the RSA host key. debug1: Found key in /home/user/.ssh/known_hosts:58 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,keyboard-interactive debug1: Next authentication method: publickey debug1: Offering public key: /home/user/.ssh/id_dsa debug1: Authentications that can continue: publickey,keyboard-interactive debug1: Trying private key: /home/user/.ssh/id_rsa debug1: Next authentication method: keyboard-interactive Password: debug1: Authentication succeeded (keyboard-interactive). debug1: channel 0: new [client-session] debug1: Entering interactive session. Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake authentication data for X11 forwarding. debug1: Requesting X11 forwarding with authentication spoofing. Last login: Tue Apr 23 14:30:59 2013 from 10.10.10.2 Have a lot of fun... user@server:~>這是（某些）SSH 伺服器版本的已知行為嗎？
這不是 SSH 伺服器的限制，而是伺服器密碼雜湊算法的限制。
在 Unix 上對密碼進行雜湊處理時，
crypt()會呼叫該函式。這可能使用許多後端之一，一種可能是使用 DES，或另一種限制算法（對於這種特殊情況，我假設您的伺服器正在使用 DES）。在現代作業系統中，預設情況下通常不使用 DES，因為它會導致特別嚴重的限制：密碼強度和驗證限制為 8 個字節。這意味著如果您的密碼被設置為“foobarbaz”，它就會變成“foobarba”，通常沒有警告或通知。同樣的限制適用於驗證，這意味著“foobarbaz”、“foobarba”和“foobarbazqux”都針對這種特殊情況進行驗證。