Re: sshd, how is this possible, security bug?

2004-01-14 Thread Chad Leigh -- Shire.Net LLC
On Jan 14, 2004, at 6:43 PM, Jonathan T. Sage wrote: you did. from ssh's point of view. however, pam is enabled, and it allows password authentication. to do what you're asking, edit sshd_config again, and toggle this line # Change to no to disable PAM authentication ChallengeResponseAuthent

Re: sshd, how is this possible, security bug?

2004-01-14 Thread Jonathan T. Sage
Didier Wiroth wrote: Hi, using freebsd 5.2 release. Below you can see what is not commented out in my sshd_config file, which is almost the default: #$FreeBSD: src/crypto/openssh/sshd_config,v 1.33 2003/09/24 19:20:23 des Exp $ #VersionAddendum FreeBSD-20030924 Protocol 2 ListenAddress x.y.z.x

sshd, how is this possible, security bug?

2004-01-14 Thread Didier Wiroth
Hi, using freebsd 5.2 release. Below you can see what is not commented out in my sshd_config file, which is almost the default: #$FreeBSD: src/crypto/openssh/sshd_config,v 1.33 2003/09/24 19:20:23 des Exp $ #VersionAddendum FreeBSD-20030924 Protocol 2 ListenAddress x.y.z.x LoginGraceTime 60 Pubk