On 1/8/11 4:33 PM, Levan, Jerry wrote:
Grumble,

sshd_config lies...

Checking the security log shows that ssh is using PAM even
though sshd_config had

#UsePAM no

I had to uncomment the above line and reboot to get
password authentication killed.

....Hold the phone...
I just checked another one of my macs and the sshd_config file
is *different* from the one on the server! They are running the
same OS version and level.

My other mac has
#UsePAM yes
and more discussion prior to the directive.

Note that the distributed sshd_config really is just a file
of comments.  The comments are supposed to match what options
are compiled into that version of sshd, but there's nothing
to make sure that the comments match the binary.

Thus it isn't too surprising that some comments might not
match the version of sshd which is running.

--
Garance Alistair Drosehn
Senior Systems Programmer
_______________________________________________
MacOSX-admin mailing list
[email protected]
http://www.omnigroup.com/mailman/listinfo/macosx-admin

Reply via email to