From owner-freebsd-security@FreeBSD.ORG  Tue Aug 16 07:04:41 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 867A716A41F
	for <freebsd-security@freebsd.org>;
	Tue, 16 Aug 2005 07:04:41 +0000 (GMT)
	(envelope-from joel@auscert.org.au)
Received: from titania.auscert.org.au (gw.auscert.org.au [203.5.112.28])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EAE8143D45
	for <freebsd-security@freebsd.org>;
	Tue, 16 Aug 2005 07:04:40 +0000 (GMT)
	(envelope-from joel@auscert.org.au)
Received: from app.auscert.org.au (app [10.0.1.192])
	by titania.auscert.org.au (8.12.10/8.12.10) with ESMTP id
	j7G74Sco032894; Tue, 16 Aug 2005 17:04:28 +1000 (EST)
Received: from app.auscert.org.au (localhost.auscert.org.au [127.0.0.1])
	by app.auscert.org.au (8.13.1/8.13.1) with ESMTP id j7G74asm061949;
	Tue, 16 Aug 2005 17:04:36 +1000 (EST)
	(envelope-from joel@app.auscert.org.au)
Message-Id: <200508160704.j7G74asm061949@app.auscert.org.au>
To: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=)
In-Reply-To: Message from des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) 
	of "Tue, 16 Aug 2005 08:49:28 +0200." <868xz2pe9z.fsf@xps.des.no> 
Date: Tue, 16 Aug 2005 17:04:36 +1000
From: Joel Hatton <joel@auscert.org.au>
X-Mailman-Approved-At: Tue, 16 Aug 2005 12:46:06 +0000
Cc: freebsd-security@freebsd.org, freebsd-security@auscert.org.au
Subject: Re: recompile sshd with OPIE? 
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Aug 2005 07:04:41 -0000

> freebsd-security@auscert.org.au writes:
> > This may sound like a really silly question, but how do I enable it? 
> 
> ChallengeResponseAuthentication Yes

Aah - silly me - I always associated that with PAM. I'll try this asap -
holiday tomorrow so in a day or two.

> > There's no man[5] sshd_config entry,

Sorry, I meant there's no mention of OPIE in man[5] sshd_config - as soon
as I read my email I thought it could be misinterpreted :)

> > but through trial and error I
> > identified an option that doesn't cause an error: SkeyAuthentication yes
> 
> Which FreeBSD version are you running?  There is no such option in any
> recent OpenSSH version, and unrecognized options should cause a fatal
> error.

5.3Rp20 - I found this option just by random guessing, it didn't cause an
error and the daemon started ok! Didn't work though...

thanks very much,
-- Joel Hatton --
Security Analyst                    | Hotline: +61 7 3365 4417
AusCERT - Australia's national CERT | Fax:     +61 7 3365 7031
The University of Queensland        | WWW:     www.auscert.org.au
Qld 4072 Australia                  | Email:   auscert@auscert.org.au