From owner-freebsd-hackers  Mon Apr 22 19: 1:28 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from winston.freebsd.org (adsl-64-173-15-98.dsl.sntc01.pacbell.net [64.173.15.98])
	by hub.freebsd.org (Postfix) with ESMTP id 52EC937B400
	for <hackers@FreeBSD.ORG>; Mon, 22 Apr 2002 19:01:23 -0700 (PDT)
Received: from winston.freebsd.org (jkh@localhost [127.0.0.1])
	by winston.freebsd.org (8.12.2/8.12.2) with ESMTP id g3N21L7W011532;
	Mon, 22 Apr 2002 19:01:21 -0700 (PDT)
	(envelope-from jkh@winston.freebsd.org)
To: Oscar Bonilla <obonilla@galileo.edu>
Cc: Anthony Schneider <aschneid@mail.slc.edu>,
	Mike Meyer <mwm-dated-1019955884.8b118e@mired.org>,
	hackers@FreeBSD.ORG
Subject: Re: ssh + compiled-in SKEY support considered harmful? 
In-Reply-To: Message from Oscar Bonilla <obonilla@galileo.edu> 
   of "Mon, 22 Apr 2002 19:44:41 MDT." <20020422194441.A17469@galileo.edu> 
Date: Mon, 22 Apr 2002 19:01:21 -0700
Message-ID: <11531.1019527281@winston.freebsd.org>
From: Jordan Hubbard <jkh@winston.freebsd.org>
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

That would be my question as well, especially since "everyone else"
seems to use that default.  Thanks to all who responded, and so
quickly at that - this at least clarified the situation (and gave me a
way out!).

- Jordan

> shouldn't the default be no skey?
> 
> On Mon, Apr 22, 2002 at 09:41:20PM -0400, Anthony Schneider wrote:
> > On Mon, Apr 22, 2002 at 08:04:43PM -0500, Mike Meyer wrote:
> > > In <200204230039.g3N0dQ8i011313@winston.freebsd.org>, Jordan Hubbard <jkh
@winston.freebsd.org> typed:
> > > > My question:  Who's "wrong" here, FreeBSD or Mac OS X?  If the latter,
> > > 
> > > Someone decided that FreeBSD should do challengeresponse
> > > authentication by default. You can fix it by uncommenting the line
> > > "#ChallengeResponseAuthentication no" in /etc/ssh/sshd_config.
> > > 
> > 
> > that's what fixxed it for me, too.
> > SkeyAuthentication no also does it. :)
> > -Anthony.
> > 
> > -----------------------------------------------
> > PGP key at:
> >     http://www.keyserver.net/
> >     http://www.anthonydotcom.com/gpgkey/key.txt
> > Home:
> >     http://www.anthonydotcom.com
> > -----------------------------------------------
> > 
> 
> 
> 
> -- 
> pgp fingerprint: BC64 2E7A CAEF 39E1 9544  80CA F7D5 784D FB46 16C1


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message