From owner-cvs-all  Thu Apr 25  4:37:33 2002
Delivered-To: cvs-all@freebsd.org
Received: from tao.org.uk (genius.tao.org.uk [212.135.162.51])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2BA4137B416; Thu, 25 Apr 2002 04:37:28 -0700 (PDT)
Received: by tao.org.uk (Postfix, from userid 100)
	id 86CE52C8; Thu, 25 Apr 2002 12:37:15 +0100 (BST)
Date: Thu, 25 Apr 2002 12:37:15 +0100
From: Josef Karthauser <joe@tao.org.uk>
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: "Jordan K. Hubbard" <jkh@FreeBSD.org>,
	cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/crypto/openssh servconf.c sshd_config
Message-ID: <20020425113715.GB21335@genius.tao.org.uk>
References: <200204250559.g3P5xrS51528@freefall.freebsd.org> <xzp662gyq1m.fsf@flood.ping.uio.no>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="sm4nu43k4a2Rpi4c"
Content-Disposition: inline
In-Reply-To: <xzp662gyq1m.fsf@flood.ping.uio.no>
User-Agent: Mutt/1.3.28i
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG


--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Apr 25, 2002 at 01:29:41PM +0200, Dag-Erling Smorgrav wrote:
> "Jordan K. Hubbard" <jkh@FreeBSD.org> writes:
> >   Log:
> >   Change default challenge/response behavior of sshd by popular demand.
> >   This brings us into sync with the behavior of sshd on other Unix plat=
forms.
>=20
> This commit is incorrect.  Challenge/response is required for PAM.
> Please back it out.

Can you find a better way of preventing this:

    genius% ssh dhcp59=20
    otp-md5 228 dh6546 ext
    S/Key Password:=20
    otp-md5 170 dh0164 ext
    S/Key Password:=20
    otp-md5 170 dh0164 ext
    S/Key Password:=20
    joe@dhcp59.tao.org.uk's password:=20

We shouldn't be doing S/Key by default.
Joe

--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjzH6msACgkQXVIcjOaxUBZ/bwCgmYr2YA0TyS+9zQTyxc1BXbkY
deAAoL5G7HPP5YiFEKVVCVLXzM24+Ea0
=O3Gz
-----END PGP SIGNATURE-----

--sm4nu43k4a2Rpi4c--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message