Disable PasswordAuthentication for new installations (closes: #236810).

2 files changed, 8 insertions, 2 deletions

diff --git a/debian/changelog b/debian/changelog
index b535c3193..ef6d73a81 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+openssh (1:3.8p1-2) UNRELEASED; urgency=low
+
+  * Disable PasswordAuthentication for new installations (closes: #236810).
+
+ -- Colin Watson <cjwatson@debian.org>  Mon,  8 Mar 2004 14:38:54 +0000
+
 openssh (1:3.8p1-1) unstable; urgency=low
 
   * New upstream release (closes: #232281):
diff --git a/debian/postinst b/debian/postinst
index 4fbe93339..a0a07474f 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -146,8 +146,8 @@ PermitEmptyPasswords no
 # Change to no to disable s/key passwords
 #ChallengeResponseAuthentication yes
 
-# To disable tunneled clear text passwords, change to no here!
-PasswordAuthentication yes
+# Change to yes to enable tunnelled clear text passwords
+PasswordAuthentication no
 
 
 # To change Kerberos options