From owner-freebsd-stable Wed Jul 31 15:32:18 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C735237B401 for ; Wed, 31 Jul 2002 15:32:13 -0700 (PDT) Received: from router.drapple.com (12-224-122-84.client.attbi.com [12.224.122.84]) by mx1.FreeBSD.org (Postfix) with ESMTP id E294943E42 for ; Wed, 31 Jul 2002 15:32:12 -0700 (PDT) (envelope-from mark@work.drapple.com) Received: from work.drapple.com (work [192.168.1.10]) by router.drapple.com (8.9.3/8.9.3) with ESMTP id PAA13771; Wed, 31 Jul 2002 15:33:51 -0700 (PDT) (envelope-from mark@work.drapple.com) Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20020731175120.C6948@outreachnetworks.com> Date: Wed, 31 Jul 2002 15:32:02 -0700 (PDT) From: Mark Hartley To: "Eric L. Howard" Subject: Re: Possible Typo in crypto/openssh/sshd_config Cc: stable@FreeBSD.ORG, Linh Pham Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 31-Jul-02 Eric L. Howard wrote: > At a certain time, now past, Linh Pham spake thusly: >> Branch: RELENG_4 >> CVSup Update Date/Time: 31 July 2002 - 11:15a PDT >> >> File: /usr/src/crypto/openssh/sshd_config >> >> On lines 64 and 65 of the sshd_config file, it currently has: >> >> # Change to no to disable PAM authentication >> #ChallengeResponseAuthentication yes >> From the commit message when des committed revision 1.27 of the file on July 3rd: Two FreeBSD-specific nits in comments: - ChallengeResponseAuthentication controls PAM, not S/Key - We don't honor PAMAuthenticationViaKbdInt, because the code path it controls doesn't make sense for us, so don't mention it. Mark. > --------8<--snip-------- > [admin@ns1 admin]$ head -2 /etc/ssh/sshd_config ># $OpenBSD: sshd_config,v 1.38 2001/04/15 21:41:29 deraadt Exp $ ># $FreeBSD: src/crypto/openssh/sshd_config,v 1.4.2.8 2002/04/25 16:53:25 des ># Exp $ > > [admin@ns1 admin]$ grep -B 1 Challenge /etc/ssh/sshd_config ># Uncomment to disable s/key passwords > ChallengeResponseAuthentication no > > [admin@ns1 admin]$ uname -a > FreeBSD ns1.outreachnetworks.com 4.6-RELEASE-p2 FreeBSD 4.6-RELEASE-p2 #1: > Fri Jul 12 15:01:07 EDT 2002 > root@ns1.outreachnetworks.com:/usr/obj/usr/src/sys/DNS i386 > > You merged the /etc/ssh/sshd_config file? > > ~elh > > -- > Eric L. Howard e l h @ o u t r e a c h n e t w o r k s . c o m > ------------------------------------------------------------------------ > www.OutreachNetworks.com 313.297.9900 > ------------------------------------------------------------------------ > Advocate of the Theocratic Rule > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message ---------------------------------- Mark Hartley mark@work.drapple.com FreeBSD - the power to serve - www.freebsd.org ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message