tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-31 01:35:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Replace remaining references to ChallengeResponse.

Browse Source 
Portable had a few additional references to ChallengeResponse related to
UsePAM, replaces these with equivalent keyboard-interactive ones.
This commit is contained in:
Darren Tucker 2021-07-03 19:27:43 +10:00
parent 53237ac789
commit 4d2d4d47a1
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sshd_config
View File

@ -72,13 +72,13 @@ AuthorizedKeysFile .ssh/authorized_keys
# Set this to 'yes' to enable PAM authentication, account processing, # Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will # and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and # be allowed through the KbdInteractiveAuthentication and
# PasswordAuthentication. Depending on your PAM configuration, # PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass # PAM authentication via KbdInteractiveAuthentication may bypass
# the setting of "PermitRootLogin without-password". # the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without # If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication # PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'. # and KbdInteractiveAuthentication to 'no'.
#UsePAM no #UsePAM no
#AllowAgentForwarding yes #AllowAgentForwarding yes

6
sshd_config.5
View File

@ -1745,17 +1745,17 @@ Enables the Pluggable Authentication Module interface.
If set to If set to
.Cm yes .Cm yes
this will enable PAM authentication using this will enable PAM authentication using
.Cm ChallengeResponseAuthentication .Cm KbdInteractiveAuthentication
and and
.Cm PasswordAuthentication .Cm PasswordAuthentication
in addition to PAM account and session module processing for all in addition to PAM account and session module processing for all
authentication types. authentication types.
.Pp .Pp
Because PAM challenge-response authentication usually serves an equivalent Because PAM keyboard-interactive authentication usually serves an equivalent
role to password authentication, you should disable either role to password authentication, you should disable either
.Cm PasswordAuthentication .Cm PasswordAuthentication
or or
.Cm ChallengeResponseAuthentication. .Cm KbdInteractiveAuthentication.
.Pp .Pp
If If
.Cm UsePAM .Cm UsePAM