Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Jul 2002 14:28:56 -0700 (PDT)
From:      Linh Pham <question@closedsrc.org>
To:        stable@freebsd.org
Subject:   Possible Typo in crypto/openssh/sshd_config
Message-ID:  <20020731142153.P73883-100000@q.closedsrc.org>

next in thread | raw e-mail | index | archive | help
Branch: RELENG_4
CVSup Update Date/Time: 31 July 2002 - 11:15a PDT

File: /usr/src/crypto/openssh/sshd_config

On lines 64 and 65 of the sshd_config file, it currently has:

# Change to no to disable PAM authentication
#ChallengeResponseAuthentication yes

According to sshd(8):

     ChallengeResponseAuthentication
             Specifies whether challenge response authentication is allowed.
             All authentication styles from login.conf(5) are supported.  The
             default is ``yes''.

That's a bit different than PAM authentication, which is:

     PAMAuthenticationViaKbdInt
             Specifies whether PAM challenge response authentication is
             allowed. This allows the use of most PAM challenge response
             authentication modules, but it will allow password authentication
             regardless of whether PasswordAuthentication is disabled.  The
             default is ``no''.

... or something to that effect.

The comment on line 64 should be:

# Change to no to disable s/key passwords

-- 

Linh Pham                                         question@closedsrc.org
Webmaster and FreeBSD Geek                          http://closedsrc.org
Apprentice Manager Editor and Writer           http://www.daemonnews.org
Courage: The things I do for love | And So Western Civilization Crumbles


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020731142153.P73883-100000>