From owner-freebsd-stable@FreeBSD.ORG  Wed Nov 21 17:01:20 2007
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id AD24416A419
	for <freebsd-stable@freebsd.org>; Wed, 21 Nov 2007 17:01:20 +0000 (UTC)
	(envelope-from vivek@khera.org)
Received: from yertle.kcilink.com (thingy.kcilink.com [74.92.149.59])
	by mx1.freebsd.org (Postfix) with ESMTP id 7A66C13C4D1
	for <freebsd-stable@freebsd.org>; Wed, 21 Nov 2007 17:01:19 +0000 (UTC)
	(envelope-from vivek@khera.org)
Received: from host-121.int.kcilink.com (host-121.int.kcilink.com
	[192.168.7.121])
	by yertle.kcilink.com (Postfix) with ESMTP id D69AEC943A
	for <freebsd-stable@freebsd.org>; Wed, 21 Nov 2007 12:01:18 -0500 (EST)
Message-Id: <EC7D0AEA-8151-45BC-B2C4-15B5E108F404@khera.org>
From: Vivek Khera <vivek@khera.org>
To: FreeBSD Stable List <freebsd-stable@freebsd.org>
In-Reply-To: <53a565700711202145q3c1a8db5k8c0d41d7ad890405@mail.gmail.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v915)
Date: Wed, 21 Nov 2007 12:01:18 -0500
References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAACAAAAAAAAAAiuboouUF6EKrT2uPks5M1AAAAAD7AgAAAPYFABAAAAAdMdDZF9ebRbtpiHRx6LqFAQAAAAA=@kmjeuro.com>
	<474325A0.7060802@gmail.com>
	<200711202315.lAKNFa4R012904@fire.js.berklix.net>
	<20071121002043.GA98340@eos.sc1.parodius.com>
	<53a565700711202145q3c1a8db5k8c0d41d7ad890405@mail.gmail.com>
X-Mailer: Apple Mail (2.915)
Subject: Re: Software for distribution of configuration files and changes
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Nov 2007 17:01:20 -0000


On Nov 21, 2007, at 12:45 AM, Quan Qiu wrote:

>
> "ChallengeResponseAuthentication no" is also required to avoid sshd
> accepting keyboard-interactive/pam.
>
>

I don't think this setting matters for PermitRootLogin without- 
password.  At least the default on FreeBSD 6 works as expected when  
setting the root login limit.