From owner-freebsd-questions  Thu Apr 11  7:18:37 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from otter.mills-atl.com (dsl-64-192-140-77.telocity.com [64.192.140.77])
	by hub.freebsd.org (Postfix) with ESMTP id A30F737B416
	for <freebsd-questions@FreeBSD.ORG>; Thu, 11 Apr 2002 07:18:31 -0700 (PDT)
Received: from localhost (jmills@localhost)
	by otter.mills-atl.com (8.9.3/8.9.3) with ESMTP id KAA01836;
	Thu, 11 Apr 2002 10:19:39 -0400
X-Authentication-Warning: otter.mills-atl.com: jmills owned process doing -bs
Date: Thu, 11 Apr 2002 10:19:39 -0400 (EDT)
From: John Mills <jmmills@telocity.com>
X-Sender: jmills@otter.mills-atl.com
Reply-To: John Mills <john.m.mills@alum.mit.edu>
To: FreeBSD-questions <freebsd-questions@FreeBSD.ORG>
Cc: "Patrick O'Reilly" <bsd@perimeter.co.za>,
	Wijnand <freebsd@wiersma.be>, David Preece <dpreece@paradise.net.nz>
Subject: Re: S/Key - this is embarrasing.
In-Reply-To: <003301c1e14e$e72ed7b0$b50d030a@PATRICK>
Message-ID: <Pine.LNX.4.21.0204111009410.1769-100000@otter.mills-atl.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hello -


On Thu, 11 Apr 2002, Patrick O'Reilly wrote:

> From: "Wijnand" <freebsd@wiersma.be>
 
> > You have to edit your /etc/ssh/sshd_config
> > you have to change 1 line:
> > SkeyAuthentication yes
> > to
> > SkeyAuthentication no

> Strange?!?
> 
> In my sshd_config I have this:
> --------------------------------
> # Uncomment to disable s/key passwords
> #ChallengeResponseAuthentication no
> --------------------------------

Since it's my first time through and the box should only be externally
accessible through another on my LAN, I did both changes. This does allow
the logins. Now I'll back them out, one at a time, and see which was
actually effective.

     "Kill them all and let God sort them out." - famous [French?] general
                                                  whose name I forget.

Meanwhile back at the ranch, I was coming in from a Linux box running
out-of-the-box openssh-3.1p1 (not an 'rpm' installation), and I don't find
any comparable switch in that system's 'ssh_config'. What should I have
done in order for the other box to successfully use
'ChallengeResponseAuthentication'?

Also, how do I restart 'inetd' in FreeBSD-4.5 without rebooting the box?

TIA.
 - John Mills


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message