Date: Wed, 23 Oct 2013 14:38:50 +0200 From: Andrei <az@azsupport.com> To: freebsd-security@freebsd.org Subject: Re: OpenPAM/SSHD privacy hole (FreeBSD 9.2+ affected) Message-ID: <20131023143850.4e14f55d@azsupport.com> In-Reply-To: <20131023120013.GK18943@albert.catwhisker.org> References: <20131023135408.38752099@azsupport.com> <20131023120013.GK18943@albert.catwhisker.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 23 Oct 2013 05:00:13 -0700 David Wolfskill <david@catwhisker.org> wrote: > > Does that also apply if /etc/ssh/sshd_config has been changed to read: > > # Change to no to disable PAM authentication > ChallengeResponseAuthentication no > > (as I routinely do)? > > Peace, > david In this case you lose "keyboard-interactive" login option. But we need it. Kind regards, Andrei.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20131023143850.4e14f55d>