Skip site navigation (1)Skip section navigation (2)
Date:      10 Jul 2002 15:37:11 +0200
From:      Dag-Erling Smorgrav <des@ofug.org>
To:        "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc:        current@freebsd.org
Subject:   Re: OPIE auth broken too (was Re: PasswordAuthentication not works in sshd)
Message-ID:  <xzp8z4jg0vs.fsf@flood.ping.uio.no>
In-Reply-To: <20020710132801.GA30351@nagual.pp.ru>
References:  <20020709133611.GA17322@nagual.pp.ru> <xzpd6txj93r.fsf@flood.ping.uio.no> <20020709164108.GA19075@nagual.pp.ru> <xzpr8icinnb.fsf@flood.ping.uio.no> <20020709232559.GA23499@nagual.pp.ru> <xzpd6tvj3h3.fsf@flood.ping.uio.no> <20020710115021.GA28478@nagual.pp.ru> <xzpznwzg4k0.fsf@flood.ping.uio.no> <20020710122357.GA29452@nagual.pp.ru> <xzpptxvg2h8.fsf@flood.ping.uio.no> <20020710132801.GA30351@nagual.pp.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
"Andrey A. Chernov" <ache@nagual.pp.ru> writes:
> On Wed, Jul 10, 2002 at 15:02:43 +0200, Dag-Erling Smorgrav wrote:
> > But why disable keyboard-interactive authentication?
> There is nowhere documented that keyboard-interactive auth is required for
> PasswordAuthentication.  It works without it for ages. Sysadmins tends to
> remove all unneded auth schemes to minimize compromise risk and left only
> few or even one auth scheme.

Andrey, I'd really suggest you back off and chill down.  You're not
making any sense at all.  If your config file really disables all
authentication methods except PasswordAuthentication, then OPIE
*never* worked for you, because it *cannot* be implemented over the
SSH PaswordAuthentication protocol.

>                  Expect mass complaints when this goes to -stable, 
> especially because of hidden nature of this bug.

It *is* in -STABLE.  Nobody's complained.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp8z4jg0vs.fsf>