From owner-freebsd-stable Tue Oct 2 11: 3:17 2001 Delivered-To: freebsd-stable@freebsd.org Received: from mikea.ath.cx (okc-65-30-192-11.mmcable.com [65.30.192.11]) by hub.freebsd.org (Postfix) with ESMTP id B585F37B405 for ; Tue, 2 Oct 2001 11:03:12 -0700 (PDT) Received: (from mikea@localhost) by mikea.ath.cx (8.11.6/8.11.1) id f92I37C03951 for stable@FreeBSD.ORG; Tue, 2 Oct 2001 13:03:07 -0500 (CDT) (envelope-from mikea) Date: Tue, 2 Oct 2001 13:03:06 -0500 From: mikea To: stable@FreeBSD.ORG Subject: Re: Something change with S/Key? Message-ID: <20011002130306.A3925@mikea.ath.cx> References: <20011001172744.BCF785C10@clyde.goodleaf.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011001172744.BCF785C10@clyde.goodleaf.net>; from john@goodleaf.net on Mon, Oct 01, 2001 at 05:27:44PM +0000 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Oct 01, 2001 at 05:27:44PM +0000, J. Goodleaf wrote: > Cvsup'd on Saturday morning and did everything as normal. Went ok. Now that > I'm at work, I notice that I can't seem to log in to my home system via ssh. > Whenever I do, I get an S/Key prompt, which I do not know how to use and did > not knowingly install/enable. > > So: > -Is S/Key in a default stable build now? > -If so, how do I turn it off? > -If not, then something is weird about this Solaris box (new to me and > carrying a fresh install of Solaris 8...) > In which case any advice from OpenSSH geniuses out there would be swell. I'm > going to hit the man pages... Did you run mergemaster? I suspect that your /etc/pam.conf needs some work. Here's what mine looks like in the login area: > # If the user can authenticate with S/Key, that's sufficient; allow clear > # password. Try kerberos, then try plain unix password. > login auth sufficient pam_skey.so > login auth requisite pam_cleartext_pass_ok.so > #login auth sufficient pam_kerberosIV.so try_first_pass > login auth required pam_unix.so try_first_pass > login account required pam_unix.so > #login account required pam_kerberosIV.so > #login session required pam_kerberosIV.so > login password required pam_permit.so > login session required pam_permit.so -- Mike Andrews mikea@mikea.ath.cx Tired old sysadmin since 1964 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message