From owner-freebsd-questions@FreeBSD.ORG  Wed Dec  7 06:11:39 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A98BE16A41F
	for <freebsd-questions@freebsd.org>;
	Wed,  7 Dec 2005 06:11:39 +0000 (GMT)
	(envelope-from freebsd-questions@m.gmane.org)
Received: from ciao.gmane.org (main.gmane.org [80.91.229.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1AA0C43D45
	for <freebsd-questions@freebsd.org>;
	Wed,  7 Dec 2005 06:11:38 +0000 (GMT)
	(envelope-from freebsd-questions@m.gmane.org)
Received: from root by ciao.gmane.org with local (Exim 4.43)
	id 1EjsWR-0005BQ-3j
	for freebsd-questions@freebsd.org; Wed, 07 Dec 2005 07:11:23 +0100
Received: from n250.camo-route.com ([216.113.24.250])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-questions@freebsd.org>; Wed, 07 Dec 2005 07:11:23 +0100
Received: from ugob by n250.camo-route.com with local (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-questions@freebsd.org>; Wed, 07 Dec 2005 07:11:23 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-questions@freebsd.org
From: Ugo Bellavance <ugob@camo-route.com>
Date: Wed, 07 Dec 2005 01:01:44 -0500
Lines: 34
Message-ID: <dn5ts8$2gu$3@sea.gmane.org>
References: <dn50md$2gu$1@sea.gmane.org>
	<20051206215204.GA79811@xor.obsecurity.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: n250.camo-route.com
User-Agent: Thunderbird 1.4 (Windows/20050908)
In-Reply-To: <20051206215204.GA79811@xor.obsecurity.org>
Sender: news <news@sea.gmane.org>
Subject: Re: SSH no passwd auth doesn't work
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Dec 2005 06:11:39 -0000

Kris Kennaway wrote:
> On Tue, Dec 06, 2005 at 04:43:40PM -0500, Ugo Bellavance wrote:
>> Hi,
>>
>> 	I'm trying to disallow password auth on ssh (freebsd 5.4).  The only 
>> lines that contain "Password" are these:
>>
>> PasswordAuthentication no
>> #PasswordAuthentication yes
>> #PermitEmptyPasswords no
>> #KerberosOrLocalPasswd yes
>>
>> I restarted sshd (/etc/rc.d/sshd restart), without success, it will 
>> still accept password auth.
>>
>> Anyone has an idea?
> 
> Probably you need to modify your PAM config instead.
> 
> Kris

Thanks.  I just realized I had linux servers configured the same and 
they also allow password auth :(.

What are the consequences of disabling PAM?

Regards,

-- 
Ugo

-> Please don't send a copy of your reply by e-mail.  I read the list.
-> Please avoid top-posting, long signatures and HTML, and cut the 
irrelevant parts in your replies.