From eed4becc4eaea6de7a88c053682e582e82418fa1 Mon Sep 17 00:00:00 2001
From: Friedrich Weber <f.weber@proxmox.com>
Date: Wed, 27 May 2026 17:37:47 +0200
Subject: [PATCH] fix: allow password authentication for egress if configured

The 'passwordAllowed' config option is intended to allow password
authentication for egress. However, setting it to true currently has
no effect, because the sshd_config templates set the SSH
'PasswordAuthentication' option to 'no'.

Fix this by manually passing '-o PasswordAuthentication=yes' to SSH
if 'passwordAllowed' is set to true.

Signed-off-by: Friedrich Weber <f.weber@proxmox.com>
---
 bin/shell/osh.pl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bin/shell/osh.pl b/bin/shell/osh.pl
index 9246a41..2be0051 100755
--- a/bin/shell/osh.pl
+++ b/bin/shell/osh.pl
@@ -1509,6 +1509,7 @@ else {
         push @command, '-A', '-o', 'AddKeysToAgent=yes';
     }
     push @command, '-o', 'PreferredAuthentications=' . (join(',', @preferredAuths));
+    push @command, '-o', 'PasswordAuthentication=yes' if $config->{'passwordAllowed'};
 
     if ($config->{'sshClientHasOptionE'}) {
         push @command, '-E', $saveFile . '.sshdebug';