summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog4
-rw-r--r--sshd.810
-rw-r--r--sshd_config5
3 files changed, 14 insertions, 5 deletions
diff --git a/ChangeLog b/ChangeLog
index 6e15ef3b3..71da4c457 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,7 @@
120010303 120010303
2 - Remove make-ssh-known-hosts.pl, ssh-keyscan is better. 2 - Remove make-ssh-known-hosts.pl, ssh-keyscan is better.
3 - Document PAM ChallengeResponseAuthentication in sshd.8
4 - Disable and comment ChallengeResponseAuthentication in sshd_config
3 5
420010301 620010301
5 - (djm) Properly add -lcrypt if needed. 7 - (djm) Properly add -lcrypt if needed.
@@ -4178,4 +4180,4 @@
4178 - Wrote replacements for strlcpy and mkdtemp 4180 - Wrote replacements for strlcpy and mkdtemp
4179 - Released 1.0pre1 4181 - Released 1.0pre1
4180 4182
4181$Id: ChangeLog,v 1.846 2001/03/03 09:00:36 djm Exp $ 4183$Id: ChangeLog,v 1.847 2001/03/03 13:16:20 djm Exp $
diff --git a/sshd.8 b/sshd.8
index 79c184330..3601dff2c 100644
--- a/sshd.8
+++ b/sshd.8
@@ -644,11 +644,17 @@ The minimum value is 512, and the default is 768.
644Specifies whether 644Specifies whether
645challenge reponse 645challenge reponse
646authentication is allowed. 646authentication is allowed.
647Currently there is only support for 647Currently there is support for
648.Xr skey 1 648.Xr skey 1
649authentication. 649and PAM authentication.
650The default is 650The default is
651.Dq yes . 651.Dq yes .
652Note that enabling ChallengeResponseAuthentication for PAM bypasses
653OpenSSH's password checking code, thus rendering options such as
654.Cm PasswordAuthentication
655and
656.Cm PermitEmptyPasswords
657ineffective.
652.It Cm StrictModes 658.It Cm StrictModes
653Specifies whether 659Specifies whether
654.Nm 660.Nm
diff --git a/sshd_config b/sshd_config
index 8d0af1060..2a9b86be2 100644
--- a/sshd_config
+++ b/sshd_config
@@ -41,8 +41,9 @@ RSAAuthentication yes
41PasswordAuthentication yes 41PasswordAuthentication yes
42PermitEmptyPasswords no 42PermitEmptyPasswords no
43 43
44# Uncomment to disable s/key passwords 44# Comment to enable s/key passwords or PAM interactive authentication
45#ChallengeResponseAuthentication no 45# NB. Neither of these are compiled in by default.
46ChallengeResponseAuthentication no
46 47
47# To change Kerberos options 48# To change Kerberos options
48#KerberosAuthentication no 49#KerberosAuthentication no