Attachment 632 Details for Bug 843 – Incorporate djm's changes.

[patch] Incorporate djm's changes.

openssh-pam-man.patch (text/plain), 1.28 KB, created by Darren Tucker on 2004-05-12 12:04:11 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Darren Tucker

Created: 2004-05-12 12:04:11 AEST

Size: 1.28 KB

patch

obsolete

>Index: sshd_config.5
>===================================================================
>RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/sshd_config.5,v
>retrieving revision 1.35
>diff -u -p -r1.35 sshd_config.5
>--- sshd_config.5	2 May 2004 12:13:20 -0000	1.35
>+++ sshd_config.5	12 May 2004 02:01:48 -0000
>@@ -624,12 +624,25 @@ If
> .Cm UsePrivilegeSeparation
> is specified, it will be disabled after authentication.
> .It Cm UsePAM
>-Enables PAM authentication (via challenge-response) and session set up.
>-If you enable this, you should probably disable
>-.Cm PasswordAuthentication .
>-If you enable
>-.CM UsePAM
>-then you will not be able to run sshd as a non-root user.  The default is
>+Enables the Pluggable Authentication Module interface.
>+If set to
>+.Dq yes
>+this will enable PAM authentication using
>+.Cm ChallengeResponseAuthentication
>+and PAM account and session module processing for all authentication types.
>+.Pp
>+Because PAM challenge-response authentication usually serves an equivalent
>+role to password authentication, you should disable either
>+.Cm PasswordAuthentication
>+or
>+.Cm ChallengeResponseAuthentication.
>+.Pp
>+If
>+.Cm UsePAM
>+is enabled, you will not be able to run
>+.Xr sshd 8
>+as a non-root user.
>+The default is
> .Dq no .
> .It Cm UsePrivilegeSeparation
> Specifies whether

Actions: View | Diff

Attachments on bug 843: 624 | 625 | 632