From owner-freebsd-current Tue Jul 9 14:33:31 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 16C2637B401 for ; Tue, 9 Jul 2002 14:33:29 -0700 (PDT) Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id E457243E52 for ; Tue, 9 Jul 2002 14:33:27 -0700 (PDT) (envelope-from des@ofug.org) Received: by flood.ping.uio.no (Postfix, from userid 2602) id 380F7534A; Tue, 9 Jul 2002 23:33:25 +0200 (CEST) X-URL: http://www.ofug.org/~des/ X-Disclaimer: The views expressed in this message do not necessarily coincide with those of any organisation or company with which I am or have been affiliated. To: "Andrey A. Chernov" Cc: current@freebsd.org Subject: Re: PasswordAuthentication not works in sshd References: <20020702114530.GB837@nagual.pp.ru> <20020709124943.GA15259@nagual.pp.ru> <20020709133611.GA17322@nagual.pp.ru> <20020709163050.GA18792@nagual.pp.ru> From: Dag-Erling Smorgrav Date: 09 Jul 2002 23:33:24 +0200 In-Reply-To: <20020709163050.GA18792@nagual.pp.ru> Message-ID: Lines: 22 User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/21.2 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG "Andrey A. Chernov" writes: > I understand that. What I say - it must be not in default setup because > break normal password auth for ssh. Only for users who have set up an OPIE password, but explicitly choose not to use OPIE. > I.e. I not set any special option in > sshd_config to enable OPIE or SKEY, why it is in the way? From sshd > configuring point of view OPIE auth must be directly enabled and not > turned on indirectly. Admins who already sets up OPIE for other programs > will be very confused finding (especially when not finding) that now OPIE > is turned on indirectly in ssh without even any config options. OPIE is already automatically enabled in every relevant FreeBSD utility, and has been for a long time. I would consider it a significant breach of POLA if sshd required additional configuration to enable OPIE when no other utility in the base system does. DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message