Comment 1 for bug 1016428

Just confirmed this behavior with local provider.

For public and private clouds we utilize the official ubuntu cloud images which have password auth disabled.

In the lxc case we do setup a user ubuntu with a disabled password and i see code to disable password auth against the ssh server, but clearly there's an issue preventing that in practice.

This is somewhat mitigated by the lack of remote network access afforded by local provider.

However its still a rather serious issue. Thank you for bringing it to our attention