Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Mar 2002 09:42:53 -0700
From:      Nate Williams <nate@yogotech.com>
To:        "Crist J. Clark" <cjc@FreeBSD.ORG>
Cc:        Dag-Erling Smorgrav <des@ofug.org>, security@FreeBSD.ORG
Subject:   Re: sshd UseLogin option
Message-ID:  <15504.54029.424057.761653@caddis.yogotech.com>
In-Reply-To: <20020313230536.B29705@blossom.cjclark.org>
References:  <xzpg034a843.fsf@flood.ping.uio.no> <20020313230536.B29705@blossom.cjclark.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Could someone please explain to me why we don't use sshd's UseLogin
> > option by default?  I know that there was a security hole related to
> > that option recently, but that's not a real reason - security holes
> > can show up anywhere - so is there anything that makes UseLogin a
> > particularly bad idea?
> 
> Who uses system passwords with ssh(1)?

We do for our remote access boxes that have numerous users accessing
them.


Nate

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15504.54029.424057.761653>