a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Jeff MacDonald
Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use them. I'm just curious. Jeff. -- Unless otherwise indicated, anything I write is either garnered from experience or

Re: a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Juha Saarinen
On 10/25/06, Jeff MacDonald [EMAIL PROTECTED] wrote: Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use them. I'm just curious. Probably not, if you have strong

Re: a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Peter
--- Juha Saarinen [EMAIL PROTECTED] wrote: On 10/25/06, Jeff MacDonald [EMAIL PROTECTED] wrote: Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use them. I'm

Re: a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Atom Powers
On 10/24/06, Jeff MacDonald [EMAIL PROTECTED] wrote: Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use them. I'm just curious. There are many arguments for and

Re: a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Josh Paetzel
On Tuesday 24 October 2006 21:54, Atom Powers wrote: On 10/24/06, Jeff MacDonald [EMAIL PROTECTED] wrote: Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use

Re: a simple questions about sshd and PasswordAuthentication

2006-10-24 Thread Jonathan Horne
On Tuesday 24 October 2006 21:49, Juha Saarinen wrote: On 10/25/06, Jeff MacDonald [EMAIL PROTECTED] wrote: Is there anything inherintaly dangerous or wrong about enabling PasswordAuthentication in sshd_config ? I understand how public keys are better and everything else. And I do use

RE: sshd and passwordauthentication

2002-12-30 Thread Didier Wiroth
debug1: Sent encrypted session key. debug1: Installing crc compensation attack detector. debug1: Received encrypted confirmation. debug1: Doing challenge reponse authentication. Password: Response: These last two lines are part of the ChallengeResponseAuthentication method, which

RE: sshd and passwordauthentication

2002-12-28 Thread Andrew Prewett
On Dec 27 Didier Wiroth wrote: I'm using a windows client, putty where I didn't find that kind of option, here is the output of ssh -v from linux test machine: OpenSSH_2.9.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090601f debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying

sshd and passwordauthentication

2002-12-27 Thread Didier Wiroth
Hey, I'm using FreeBSD 4.7-RELEASE with sshd version OpenSSH_3.4p1 FreeBSD-20020702 I would like to use only public key authentication. I've set the PasswordAuthentication option in /etc/ssh/sshd_config to no but it doesn't work! I can still log on with passwords! Why? How do I have to change the

Re: sshd and passwordauthentication

2002-12-27 Thread Daniel Bye
On Fri, Dec 27, 2002 at 09:54:03AM +0100, Didier Wiroth wrote: Hey, I'm using FreeBSD 4.7-RELEASE with sshd version OpenSSH_3.4p1 FreeBSD-20020702 I would like to use only public key authentication. I've set the PasswordAuthentication option in /etc/ssh/sshd_config to no but it doesn't work!

RE: sshd and passwordauthentication

2002-12-27 Thread Didier Wiroth
Yes! ;-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Daniel Bye Sent: Friday, December 27, 2002 11:02 To: [EMAIL PROTECTED] Subject: Re: sshd and passwordauthentication On Fri, Dec 27, 2002 at 09:54:03AM +0100, Didier Wiroth wrote: Hey

RE: sshd and passwordauthentication

2002-12-27 Thread Didier Wiroth
/messages! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Daniel Bye Sent: Friday, December 27, 2002 11:32 To: [EMAIL PROTECTED] Subject: Re: sshd and passwordauthentication On Fri, Dec 27, 2002 at 11:02:21AM +0100, Didier Wiroth wrote: Yes

Re: sshd and passwordauthentication

2002-12-27 Thread Daniel Bye
On Fri, Dec 27, 2002 at 04:02:52PM +0100, Didier Wiroth wrote: These are the only activated options: Protocol 2,1 ListenAddress x.y.z.x LoginGraceTime 40 PermitRootLogin no PasswordAuthentication no PermitEmptyPasswords no Subsystem sftp/usr/libexec/sftp-server All other

RE: sshd and passwordauthentication

2002-12-27 Thread Didier Wiroth
challenge reponse authentication. Password: Response: Does that help? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Daniel Bye Sent: Friday, December 27, 2002 17:44 To: [EMAIL PROTECTED] Subject: Re: sshd and passwordauthentication On Fri, Dec 27