From owner-freebsd-security  Wed Mar 28  2: 2:51 2001
Delivered-To: freebsd-security@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP id E34BC37B719
	for <freebsd-security@FreeBSD.ORG>; Wed, 28 Mar 2001 02:02:48 -0800 (PST)
	(envelope-from gshapiro@gshapiro.net)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.0.Beta6/8.12.0.Beta6) id f2SA2kJj024464;
	Wed, 28 Mar 2001 02:02:46 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15041.46790.812789.517387@horsey.gshapiro.net>
Date: Wed, 28 Mar 2001 02:02:46 -0800
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: freebsd <freebsd@hobbydump.com>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: skey and openssh with FreeBSD4.2 Stable
In-Reply-To: <20010328012204.A46268@hobbydump.com>
References: <20010328012204.A46268@hobbydump.com>
X-Mailer: VM 6.91 under 21.2  (beta42) "Poseidon" XEmacs Lucid
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

freebsd> Does anyone know how to get skey working with openssh. I can get
freebsd> it working with telnet and other services but not with ssh.

See:

http://www.freebsd.org/cgi/query-pr.cgi?pr=25105

For now (until this gets fixed), you can add this to /etc/pam.conf:

# OpenSSH S/Key support
csshd	auth	sufficient	pam_skey.so
csshd	auth	required	pam_unix.so			try_first_pass
csshd	session	required	pam_permit.so

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message