1 files changed, 8 insertions, 2 deletions
diff --git a/sshd.8 b/sshd.8
index 79c184330..3601dff2c 100644
--- a/sshd.8
+++ b/sshd.8
@@ -644,11 +644,17 @@ The minimum value is 512, and the default is 768.
 Specifies whether
 challenge reponse
 authentication is allowed.
-Currently there is only support for
+Currently there is support for
 .Xr skey 1
-authentication.
+and PAM authentication.
 The default is
 .Dq yes .
+Note that enabling ChallengeResponseAuthentication for PAM bypasses 
+OpenSSH's password checking code, thus rendering options such as 
+.Cm PasswordAuthentication 
+and
+.Cm PermitEmptyPasswords
+ineffective.
 .It Cm StrictModes
 Specifies whether
 .Nm

diff --git a/sshd.8 b/sshd.8 index 79c184330..3601dff2c 100644 --- a/sshd.8 +++ b/sshd.8
@@ -644,11 +644,17 @@ The minimum value is 512, and the default is 768.
644	Specifies whether	644	Specifies whether
645	challenge reponse	645	challenge reponse
646	authentication is allowed.	646	authentication is allowed.
647	Currently there is only support for	647	Currently there is support for
648	.Xr skey 1	648	.Xr skey 1
649	authentication.	649	and PAM authentication.
650	The default is	650	The default is
651	.Dq yes .	651	.Dq yes .
		652	Note that enabling ChallengeResponseAuthentication for PAM bypasses
		653	OpenSSH's password checking code, thus rendering options such as
		654	.Cm PasswordAuthentication
		655	and
		656	.Cm PermitEmptyPasswords
		657	ineffective.
652	.It Cm StrictModes	658	.It Cm StrictModes
653	Specifies whether	659	Specifies whether
654	.Nm	660	.Nm