From owner-freebsd-current@FreeBSD.ORG Sun Jul 20 12:38:06 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 74A6737B401 for ; Sun, 20 Jul 2003 12:38:06 -0700 (PDT) Received: from carver.gumbysoft.com (carver.gumbysoft.com [66.220.23.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id ED83543F93 for ; Sun, 20 Jul 2003 12:38:05 -0700 (PDT) (envelope-from dwhite@gumbysoft.com) Received: by carver.gumbysoft.com (Postfix, from userid 1000) id D79FD72DD1; Sun, 20 Jul 2003 12:38:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by carver.gumbysoft.com (Postfix) with ESMTP id D331072DD0; Sun, 20 Jul 2003 12:38:05 -0700 (PDT) Date: Sun, 20 Jul 2003 12:38:05 -0700 (PDT) From: Doug White To: Farid Hajji In-Reply-To: <200307202032.02281.me@farid-hajji.de> Message-ID: <20030720123716.V65450@carver.gumbysoft.com> References: <200307202032.02281.me@farid-hajji.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-current@freebsd.org Subject: Re: login(1) doesn't enforce times.allow/times.deny over ssh(1) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Jul 2003 19:38:06 -0000 On Sun, 20 Jul 2003, Farid Hajji wrote: > When using ssh, I'm not trying public/private keys, > just plain unix passwords. Doesn't ssh access login(1) > in this case? sshd does not use login unless requested to do so by the UseLogin config parameter. There have been security vulnerabilities exposed by using this option in the past. You have been warned :) -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org