Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Jul 2002 19:23:59 +0400
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        Dag-Erling Smorgrav <des@ofug.org>
Cc:        current@FreeBSD.ORG
Subject:   Patch for review (was Re: OPIE auth broken too (was Re: PasswordAuthentication not works in sshd))
Message-ID:  <20020710152358.GA31729@nagual.pp.ru>
In-Reply-To: <xzp8z4jg0vs.fsf@flood.ping.uio.no>
References:  <20020709164108.GA19075@nagual.pp.ru> <xzpr8icinnb.fsf@flood.ping.uio.no> <20020709232559.GA23499@nagual.pp.ru> <xzpd6tvj3h3.fsf@flood.ping.uio.no> <20020710115021.GA28478@nagual.pp.ru> <xzpznwzg4k0.fsf@flood.ping.uio.no> <20020710122357.GA29452@nagual.pp.ru> <xzpptxvg2h8.fsf@flood.ping.uio.no> <20020710132801.GA30351@nagual.pp.ru> <xzp8z4jg0vs.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jul 10, 2002 at 15:37:11 +0200, Dag-Erling Smorgrav wrote:
> making any sense at all.  If your config file really disables all
> authentication methods except PasswordAuthentication, then OPIE
> *never* worked for you, because it *cannot* be implemented over the
> SSH PaswordAuthentication protocol.

OPIE should be not enabled by default since according to your own words 
"it *cannot* be implemented over the SSH PaswordAuthentication protocol."
PasswordAuthentication is very broken otherwise and not allows to log in.

--- sshd.bak	Tue Jul  9 14:55:05 2002
+++ sshd	Wed Jul 10 19:16:54 2002
@@ -6,8 +6,8 @@
 
 # auth
 auth		required	pam_nologin.so	no_warn
-auth		sufficient	pam_opie.so	no_warn no_fake_prompts
-auth		required	pam_opieaccess.so	no_warn
+#auth            sufficient      pam_opie.so     no_warn no_fake_prompts
+#auth            required        pam_opieaccess.so       no_warn
 auth		required	pam_unix.so	no_warn try_first_pass
 
 # account

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020710152358.GA31729>