summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@dtucker.net>2021-07-03 11:27:43 +0200
committerDarren Tucker <dtucker@dtucker.net>2021-07-03 11:27:43 +0200
commit4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2 (patch)
treec3e4c13d96153bc9518b88715d72ea8ae09bc303
parentSync remaining ChallengeResponse removal. (diff)
downloadopenssh-4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2.tar.xz
openssh-4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2.zip
Replace remaining references to ChallengeResponse.
Portable had a few additional references to ChallengeResponse related to UsePAM, replaces these with equivalent keyboard-interactive ones.
-rw-r--r--sshd_config6
-rw-r--r--sshd_config.56
2 files changed, 6 insertions, 6 deletions
diff --git a/sshd_config b/sshd_config
index 4b3011ec3..c423eba1b 100644
--- a/sshd_config
+++ b/sshd_config
@@ -72,13 +72,13 @@ AuthorizedKeysFile .ssh/authorized_keys
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
-# be allowed through the ChallengeResponseAuthentication and
+# be allowed through the KbdInteractiveAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
-# PAM authentication via ChallengeResponseAuthentication may bypass
+# PAM authentication via KbdInteractiveAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
-# and ChallengeResponseAuthentication to 'no'.
+# and KbdInteractiveAuthentication to 'no'.
#UsePAM no
#AllowAgentForwarding yes
diff --git a/sshd_config.5 b/sshd_config.5
index 07635932c..faa0a0f39 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -1745,17 +1745,17 @@ Enables the Pluggable Authentication Module interface.
If set to
.Cm yes
this will enable PAM authentication using
-.Cm ChallengeResponseAuthentication
+.Cm KbdInteractiveAuthentication
and
.Cm PasswordAuthentication
in addition to PAM account and session module processing for all
authentication types.
.Pp
-Because PAM challenge-response authentication usually serves an equivalent
+Because PAM keyboard-interactive authentication usually serves an equivalent
role to password authentication, you should disable either
.Cm PasswordAuthentication
or
-.Cm ChallengeResponseAuthentication.
+.Cm KbdInteractiveAuthentication.
.Pp
If
.Cm UsePAM