From owner-freebsd-stable Wed Oct 3 11: 3:18 2001 Delivered-To: freebsd-stable@freebsd.org Received: from relay.gnf.org (relay.gnf.org [208.44.31.36]) by hub.freebsd.org (Postfix) with ESMTP id A256337B405 for ; Wed, 3 Oct 2001 11:03:04 -0700 (PDT) Received: from mail.gnf.org (smtp.gnf.org [10.0.0.11]) by relay.gnf.org (8.11.6/8.11.6) with ESMTP id f93I2xj28633; Wed, 3 Oct 2001 11:02:59 -0700 Received: by mail.gnf.org (Postfix, from userid 888) id 22F8D11E505; Wed, 3 Oct 2001 11:02:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.gnf.org (Postfix) with ESMTP id 1E39111A576; Wed, 3 Oct 2001 11:02:13 -0700 (PDT) Date: Wed, 3 Oct 2001 11:02:12 -0700 (PDT) From: Gordon Tetlow To: Nick Barnes Cc: Subject: Re: sshd: requiring password _and_ RSA authentication In-Reply-To: <99746.1002123819@thrush.ravenbrook.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, 3 Oct 2001, Nick Barnes wrote: > I've upgraded the machine to FreeBSD 4.4-RELENG. The sshd which comes > with this is "OpenSSH_2.3.0 FreeBSD localisations 20010713". The > config file was quite different; presumably the previous version was > not OpenSSH. I can't figure out how to configure this to require both > a password and a shared secret. Is it possible? > > (RSA authentication only is fine if your laptops never get stolen or > left unattended...). Put a password on your shared secret. Problem solved. -gordon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message