Date: 10 Jul 2002 15:37:11 +0200 From: Dag-Erling Smorgrav <des@ofug.org> To: "Andrey A. Chernov" <ache@nagual.pp.ru> Cc: current@freebsd.org Subject: Re: OPIE auth broken too (was Re: PasswordAuthentication not works in sshd) Message-ID: <xzp8z4jg0vs.fsf@flood.ping.uio.no> In-Reply-To: <20020710132801.GA30351@nagual.pp.ru> References: <20020709133611.GA17322@nagual.pp.ru> <xzpd6txj93r.fsf@flood.ping.uio.no> <20020709164108.GA19075@nagual.pp.ru> <xzpr8icinnb.fsf@flood.ping.uio.no> <20020709232559.GA23499@nagual.pp.ru> <xzpd6tvj3h3.fsf@flood.ping.uio.no> <20020710115021.GA28478@nagual.pp.ru> <xzpznwzg4k0.fsf@flood.ping.uio.no> <20020710122357.GA29452@nagual.pp.ru> <xzpptxvg2h8.fsf@flood.ping.uio.no> <20020710132801.GA30351@nagual.pp.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
"Andrey A. Chernov" <ache@nagual.pp.ru> writes: > On Wed, Jul 10, 2002 at 15:02:43 +0200, Dag-Erling Smorgrav wrote: > > But why disable keyboard-interactive authentication? > There is nowhere documented that keyboard-interactive auth is required for > PasswordAuthentication. It works without it for ages. Sysadmins tends to > remove all unneded auth schemes to minimize compromise risk and left only > few or even one auth scheme. Andrey, I'd really suggest you back off and chill down. You're not making any sense at all. If your config file really disables all authentication methods except PasswordAuthentication, then OPIE *never* worked for you, because it *cannot* be implemented over the SSH PaswordAuthentication protocol. > Expect mass complaints when this goes to -stable, > especially because of hidden nature of this bug. It *is* in -STABLE. Nobody's complained. DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp8z4jg0vs.fsf>