diff options
author | Darren Tucker <dtucker@dtucker.net> | 2021-07-03 11:27:43 +0200 |
---|---|---|
committer | Darren Tucker <dtucker@dtucker.net> | 2021-07-03 11:27:43 +0200 |
commit | 4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2 (patch) | |
tree | c3e4c13d96153bc9518b88715d72ea8ae09bc303 | |
parent | Sync remaining ChallengeResponse removal. (diff) | |
download | openssh-4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2.tar.xz openssh-4d2d4d47a18d93f3e0a91a241a6fdb545bbf7dc2.zip |
Replace remaining references to ChallengeResponse.
Portable had a few additional references to ChallengeResponse related to
UsePAM, replaces these with equivalent keyboard-interactive ones.
-rw-r--r-- | sshd_config | 6 | ||||
-rw-r--r-- | sshd_config.5 | 6 |
2 files changed, 6 insertions, 6 deletions
diff --git a/sshd_config b/sshd_config index 4b3011ec3..c423eba1b 100644 --- a/sshd_config +++ b/sshd_config @@ -72,13 +72,13 @@ AuthorizedKeysFile .ssh/authorized_keys # Set this to 'yes' to enable PAM authentication, account processing, # and session processing. If this is enabled, PAM authentication will -# be allowed through the ChallengeResponseAuthentication and +# be allowed through the KbdInteractiveAuthentication and # PasswordAuthentication. Depending on your PAM configuration, -# PAM authentication via ChallengeResponseAuthentication may bypass +# PAM authentication via KbdInteractiveAuthentication may bypass # the setting of "PermitRootLogin without-password". # If you just want the PAM account and session checks to run without # PAM authentication, then enable this but set PasswordAuthentication -# and ChallengeResponseAuthentication to 'no'. +# and KbdInteractiveAuthentication to 'no'. #UsePAM no #AllowAgentForwarding yes diff --git a/sshd_config.5 b/sshd_config.5 index 07635932c..faa0a0f39 100644 --- a/sshd_config.5 +++ b/sshd_config.5 @@ -1745,17 +1745,17 @@ Enables the Pluggable Authentication Module interface. If set to .Cm yes this will enable PAM authentication using -.Cm ChallengeResponseAuthentication +.Cm KbdInteractiveAuthentication and .Cm PasswordAuthentication in addition to PAM account and session module processing for all authentication types. .Pp -Because PAM challenge-response authentication usually serves an equivalent +Because PAM keyboard-interactive authentication usually serves an equivalent role to password authentication, you should disable either .Cm PasswordAuthentication or -.Cm ChallengeResponseAuthentication. +.Cm KbdInteractiveAuthentication. .Pp If .Cm UsePAM |