From owner-freebsd-security  Sun Dec  2 13:43:46 2001
Delivered-To: freebsd-security@freebsd.org
Received: from netau1.alcanet.com.au (ntp.alcanet.com.au [203.62.196.27])
	by hub.freebsd.org (Postfix) with ESMTP id 7EF9737B416
	for <freebsd-security@FreeBSD.ORG>; Sun,  2 Dec 2001 13:43:40 -0800 (PST)
Received: from mfg1.cim.alcatel.com.au (mfg1.cim.alcatel.com.au [139.188.23.1])
	by netau1.alcanet.com.au (8.9.3 (PHNE_22672)/8.9.3) with ESMTP id IAA05877;
	Mon, 3 Dec 2001 08:43:29 +1100 (EDT)
Received: from gsmx07.alcatel.com.au by cim.alcatel.com.au
 (PMDF V5.2-32 #37640) with ESMTP id <01KBFBQIG2IOVM70M2@cim.alcatel.com.au>;
 Mon, 3 Dec 2001 08:43:28 +1100
Received: (from jeremyp@localhost)	by gsmx07.alcatel.com.au (8.11.6/8.11.6)
 id fB2LhQq03759; Mon, 03 Dec 2001 08:43:26 +1100
Content-return: prohibited
Date: Mon, 03 Dec 2001 08:43:26 +1100
From: Peter Jeremy <peter.jeremy@alcatel.com.au>
Subject: Re: OPIE and ssh
In-reply-to: <20011130220948.T36907-100000@bunning.skiltech.com>; from
 minter@lunenburg.org on Fri, Nov 30, 2001 at 10:10:51PM -0500
To: "H. Wade Minter" <minter@lunenburg.org>
Cc: "f.johan.beisser" <jan@caustic.org>, freebsd-security@FreeBSD.ORG
Mail-Followup-To: "H. Wade Minter" <minter@lunenburg.org>,
	"f.johan.beisser" <jan@caustic.org>, freebsd-security@FreeBSD.ORG
Message-id: <20011203084326.A3702@gsmx07.alcatel.com.au>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-disposition: inline
User-Agent: Mutt/1.2.5i
References: <15367.51556.94034.892901@horsey.gshapiro.net>
 <20011130220948.T36907-100000@bunning.skiltech.com>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On 2001-Nov-30 22:10:51 -0500, "H. Wade Minter" <minter@lunenburg.org> wrote:
>On Fri, 30 Nov 2001, Gregory Neil Shapiro wrote:
>
>> Yep, use it every day.  All I did was:
>>
>> cd /etc
>> rm skeykeys
>> ln -s opiekeys skeykeys
>> keyinit gshapiro
>>
>> My ~/.ssh/config contains (among other things):
>>
>> # Defaults
>> Host *
>> 	StrictHostKeyChecking	yes
>
>Is there anything else that needs to be done?  I've been interested in
>playing around with S/Key or OPIE, but when I tried those steps, I still
>get a normal password prompt when I SSH in:
>
>bash-2.04$ slogin kenbridge
>minter@kenbridge's password:

Try adding "ChallengeResponseAuthentication yes" to /etc/ssh/ssh_config.

Peter

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message