Date: Tue, 2 Oct 2001 13:03:06 -0500 From: mikea <mikea@mikea.ath.cx> To: stable@FreeBSD.ORG Subject: Re: Something change with S/Key? Message-ID: <20011002130306.A3925@mikea.ath.cx> In-Reply-To: <20011001172744.BCF785C10@clyde.goodleaf.net>; from john@goodleaf.net on Mon, Oct 01, 2001 at 05:27:44PM %2B0000 References: <20011001172744.BCF785C10@clyde.goodleaf.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 01, 2001 at 05:27:44PM +0000, J. Goodleaf wrote: > Cvsup'd on Saturday morning and did everything as normal. Went ok. Now that > I'm at work, I notice that I can't seem to log in to my home system via ssh. > Whenever I do, I get an S/Key prompt, which I do not know how to use and did > not knowingly install/enable. > > So: > -Is S/Key in a default stable build now? > -If so, how do I turn it off? > -If not, then something is weird about this Solaris box (new to me and > carrying a fresh install of Solaris 8...) > In which case any advice from OpenSSH geniuses out there would be swell. I'm > going to hit the man pages... Did you run mergemaster? I suspect that your /etc/pam.conf needs some work. Here's what mine looks like in the login area: > # If the user can authenticate with S/Key, that's sufficient; allow clear > # password. Try kerberos, then try plain unix password. > login auth sufficient pam_skey.so > login auth requisite pam_cleartext_pass_ok.so > #login auth sufficient pam_kerberosIV.so try_first_pass > login auth required pam_unix.so try_first_pass > login account required pam_unix.so > #login account required pam_kerberosIV.so > #login session required pam_kerberosIV.so > login password required pam_permit.so > login session required pam_permit.so -- Mike Andrews mikea@mikea.ath.cx Tired old sysadmin since 1964 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011002130306.A3925>