From owner-freebsd-stable Wed Jul 31 14:33:33 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ADD8637B400 for ; Wed, 31 Jul 2002 14:33:30 -0700 (PDT) Received: from q.closedsrc.org (ip233.gte15.rb1.bel.nwlink.com [209.20.244.233]) by mx1.FreeBSD.org (Postfix) with ESMTP id 53ECE43E4A for ; Wed, 31 Jul 2002 14:33:30 -0700 (PDT) (envelope-from question@closedsrc.org) Received: by q.closedsrc.org (Postfix, from userid 1001) id 4FAEC5341; Wed, 31 Jul 2002 14:28:56 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by q.closedsrc.org (Postfix) with ESMTP id 4E2665340 for ; Wed, 31 Jul 2002 14:28:56 -0700 (PDT) Date: Wed, 31 Jul 2002 14:28:56 -0700 (PDT) From: Linh Pham To: stable@freebsd.org Subject: Possible Typo in crypto/openssh/sshd_config Message-ID: <20020731142153.P73883-100000@q.closedsrc.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Branch: RELENG_4 CVSup Update Date/Time: 31 July 2002 - 11:15a PDT File: /usr/src/crypto/openssh/sshd_config On lines 64 and 65 of the sshd_config file, it currently has: # Change to no to disable PAM authentication #ChallengeResponseAuthentication yes According to sshd(8): ChallengeResponseAuthentication Specifies whether challenge response authentication is allowed. All authentication styles from login.conf(5) are supported. The default is ``yes''. That's a bit different than PAM authentication, which is: PAMAuthenticationViaKbdInt Specifies whether PAM challenge response authentication is allowed. This allows the use of most PAM challenge response authentication modules, but it will allow password authentication regardless of whether PasswordAuthentication is disabled. The default is ``no''. ... or something to that effect. The comment on line 64 should be: # Change to no to disable s/key passwords -- Linh Pham question@closedsrc.org Webmaster and FreeBSD Geek http://closedsrc.org Apprentice Manager Editor and Writer http://www.daemonnews.org Courage: The things I do for love | And So Western Civilization Crumbles To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message