Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Jan 2004 20:10:46 -0700
From:      "Chad Leigh -- Shire.Net LLC" <chad@shire.net>
To:        FreeBSD-questions <questions@freebsd.org>
Subject:   Re: sshd, how is this possible, security bug?
Message-ID:  <696E4A56-4708-11D8-84FF-003065A70D30@shire.net>
In-Reply-To: <4005F03E.3010808@theatre.msu.edu>
References:  <130d319f1f.19f1f130d3@etat.lu> <4005F03E.3010808@theatre.msu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help

On Jan 14, 2004, at 6:43 PM, Jonathan T. Sage wrote:

>
> you did.  from ssh's point of view.  however, pam is enabled, and it 
> allows password authentication.  to do what you're asking, edit 
> sshd_config again, and toggle this line
>
> # Change to no to disable PAM authentication
> ChallengeResponseAuthentication no
>
> this is my fix, it allows only pubkey logins.  i'm sure this is also 
> possible with PAM, and actually, would love to know how that works too 
> :)

Does anyone have any idea on how to require a pubkey AND a password?  I 
don't want either one to be enough, but want both...

Thanks
Chad



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?696E4A56-4708-11D8-84FF-003065A70D30>