solution: if a user changes his password all sshd processes belonging to this user have to close all existing connections that have been opened using this password at the time where the new [password||password_hash] is stored in the database.
↧