Leave ChallengeResponseAuthentication enabled by default, since

PasswordAuthentication has been turned off for new installs since
1:3.8p1-2.

18 files changed, 88 insertions, 85 deletions

diff --git a/debian/changelog b/debian/changelog
index 2d527565d..8da64d681 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,9 @@ openssh (1:3.8.1p1-8.sarge.1) UNRELEASED; urgency=high
     ChallengeResponseAuthentication too. The current PAM code will attempt
     password-style authentication if ChallengeResponseAuthentication is
     enabled (closes: #250369).
+  * This will ask a question of anyone who installed fresh with 1:3.8p1-2 or
+    later and then upgraded. Sorry about that ... for this reason, the
+    default answer is to leave ChallengeResponseAuthentication enabled.
 
  -- Colin Watson <cjwatson@debian.org>  Tue,  5 Oct 2004 19:05:08 +0100
 
diff --git a/debian/po/ca.po b/debian/po/ca.po
index 85a65e9e4..ff47a5ce5 100644
--- a/debian/po/ca.po
+++ b/debian/po/ca.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh_1:3.8p1-3_templates\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-03-05 19:46GMT\n"
 "Last-Translator: Aleix Badia i Bosch <abadia@ica.es>\n"
 "Language-Team: Catalan <debian-l10n-catalan@lists.debian.org>\n"
@@ -371,8 +371,8 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
diff --git a/debian/po/cs.po b/debian/po/cs.po
index 0374e4a9f..3d350a75e 100644
--- a/debian/po/cs.po
+++ b/debian/po/cs.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-01-28 15:10+0100\n"
 "Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
 "Language-Team: Czech <provoz@debian.cz>\n"
@@ -368,10 +368,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/da.po b/debian/po/da.po
index 74f8e266a..3e7b97778 100644
--- a/debian/po/da.po
+++ b/debian/po/da.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1p2\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-10-28 14:30+0200\n"
 "Last-Translator: Morten Brix Pedersen <morten@wtf.dk>\n"
 "Language-Team: debian-l10n-danish <debian-l10n-danish@lists.debian.org>\n"
@@ -375,10 +375,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/de.po b/debian/po/de.po
index 49d13b8c5..55a1f6c50 100644
--- a/debian/po/de.po
+++ b/debian/po/de.po
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-05-30 09:49-0200\n"
 "Last-Translator: Helge Kreutzmann <kreutzm@itp.uni-hannover.de>\n"
 "Language-Team: de <debian-l10n-german@lists.debian.org>\n"
@@ -382,8 +382,8 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
diff --git a/debian/po/el.po b/debian/po/el.po
index cb1d43cb4..bdfa30a5e 100644
--- a/debian/po/el.po
+++ b/debian/po/el.po
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: el\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-02-15 14:14EEST\n"
 "Last-Translator: Konstantinos Margaritis <markos@debian.org>\n"
 "Language-Team: Greek <debian-l10n-greek@lists.debian.org>\n"
@@ -392,10 +392,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/es.po b/debian/po/es.po
index 06de59528..7f26298bf 100644
--- a/debian/po/es.po
+++ b/debian/po/es.po
@@ -32,7 +32,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1p2-11\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-01-17 17:47+0200\n"
 "Last-Translator: Javier Fernandez-Sanguino Peńa <jfs@computer.org>\n"
 "Language-Team: Debian L10n Spanish <debian-l10n-spanish@lists.debian.org>\n"
@@ -396,10 +396,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/fr.po b/debian/po/fr.po
index 0f808b2f0..dec2a7b3f 100644
--- a/debian/po/fr.po
+++ b/debian/po/fr.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1p2-5\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-05-22 10:34+0200\n"
 "Last-Translator: Denis Barbier <barbier@debian.org>\n"
 "Language-Team: French <Debian-l10n-french@lists.debian.org>\n"
@@ -393,10 +393,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/it.po b/debian/po/it.po
index 427ce4cb0..6b8a55b4f 100644
--- a/debian/po/it.po
+++ b/debian/po/it.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-12-21 12:23+0100\n"
 "Last-Translator: Renato Gini <rgini@openlabs.it>\n"
 "Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
@@ -387,10 +387,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/ja.po b/debian/po/ja.po
index b23859db6..274010a93 100644
--- a/debian/po/ja.po
+++ b/debian/po/ja.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-09-24 09:32+0900\n"
 "Last-Translator: Kenshi Muto <kmuto@debian.org>\n"
 "Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
@@ -373,10 +373,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/nl.po b/debian/po/nl.po
index 9ec34ca5e..cd4c10b32 100644
--- a/debian/po/nl.po
+++ b/debian/po/nl.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1p2-9\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-09-27 14:43+0100\n"
 "Last-Translator: Bart Cornelis <cobaco@linux.be>\n"
 "Language-Team: debian-l10n-dutch <debian-l10n-dutch@lists.debian.org>\n"
@@ -388,10 +388,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/pl.po b/debian/po/pl.po
index 6211dd9f9..91f713604 100644
--- a/debian/po/pl.po
+++ b/debian/po/pl.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-04-08 18:28+0200\n"
 "Last-Translator: Emil Nowak <emil5@go2.pl>\n"
 "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
@@ -380,10 +380,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
index d705e794a..6af26c984 100644
--- a/debian/po/pt_BR.po
+++ b/debian/po/pt_BR.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh_3.6.1p2-9\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-11-09 16:29-0300\n"
 "Last-Translator: André Luís Lopes <andrelop@debian.org>\n"
 "Language-Team: Debian-BR Project <debian-l10n-portuguese@lists.debian.org>\n"
@@ -387,10 +387,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/ru.po b/debian/po/ru.po
index ed61285d9..00bdb72d5 100644
--- a/debian/po/ru.po
+++ b/debian/po/ru.po
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2003-10-02 17:20+0500\n"
 "Last-Translator: Ilgiz Kalmetev <translator@ilgiz.pp.ru>\n"
 "Language-Team: russian <ru@li.org>\n"
@@ -377,10 +377,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
index 447bf89a4..0951bf79b 100644
--- a/debian/po/templates.pot
+++ b/debian/po/templates.pot
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -315,8 +315,8 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
diff --git a/debian/po/tr.po b/debian/po/tr.po
index af8a0a9a2..588b3f636 100644
--- a/debian/po/tr.po
+++ b/debian/po/tr.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: ssh\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-04-27 06:50+0300\n"
 "Last-Translator: Recai Oktaş <roktas@omu.edu.tr>\n"
 "Language-Team: Turkish <debian-l10n-turkish@lists.debian.org>\n"
@@ -376,8 +376,8 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
index 8ced202c0..fd0fb15c1 100644
--- a/debian/po/zh_CN.po
+++ b/debian/po/zh_CN.po
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: openssh 3.6.1p2-11\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2004-10-05 20:41+0100\n"
+"POT-Creation-Date: 2004-10-06 13:54+0100\n"
 "PO-Revision-Date: 2004-02-02 18:48+1300\n"
 "Last-Translator: Hiei Xu <nicky@mail.edu.cn>\n"
 "Language-Team: Chinese/Simplified <i18n-translation@lists.linux.net.cn>\n"
@@ -357,10 +357,10 @@ msgstr ""
 #. Description
 #: ../templates.master:130
 msgid ""
-"If you disable challenge-response authentication (the default answer), then "
-"users will not be able to log in using passwords. If you leave it enabled, "
-"then the 'PasswordAuthentication no' option will have no useful effect "
-"unless you also adjust your PAM configuration in /etc/pam.d/ssh."
+"If you disable challenge-response authentication, then users will not be "
+"able to log in using passwords. If you leave it enabled (the default "
+"answer), then the 'PasswordAuthentication no' option will have no useful "
+"effect unless you also adjust your PAM configuration in /etc/pam.d/ssh."
 msgstr ""
 
 #~ msgid "Privilege separation"
diff --git a/debian/templates.master b/debian/templates.master
index 55727c933..4ae80e3fb 100644
--- a/debian/templates.master
+++ b/debian/templates.master
@@ -126,7 +126,7 @@ _Description: Environment options on keys have been deprecated
 
 Template: ssh/disable_cr_auth
 Type: boolean
-Default: true
+Default: false
 _Description: Disable challenge-response authentication?
  Password authentication appears to be disabled in your current OpenSSH
  server configuration. In order to prevent users from logging in using
@@ -135,7 +135,7 @@ _Description: Disable challenge-response authentication?
  authentication, or else ensure that your PAM configuration does not allow
  Unix password file authentication.
  .
- If you disable challenge-response authentication (the default answer), then
- users will not be able to log in using passwords. If you leave it enabled,
- then the 'PasswordAuthentication no' option will have no useful effect
- unless you also adjust your PAM configuration in /etc/pam.d/ssh.
+ If you disable challenge-response authentication, then users will not be
+ able to log in using passwords. If you leave it enabled (the default
+ answer), then the 'PasswordAuthentication no' option will have no useful
+ effect unless you also adjust your PAM configuration in /etc/pam.d/ssh.