[Bug 853] PAM auth needs ChallengeResponseAuthentication enabled

bugzilla-daemon at mindrot.org
Wed, 28 Apr 2004 16:49:48 -0000

http://bugzilla.mindrot.org/show_bug.cgi?id=853

           Summary: PAM auth needs ChallengeResponseAuthentication enabled
           Product: Portable OpenSSH
           Version: 3.8.1p1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: PAM support
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: leg at terra.com.br


With "ChallengeResponseAuthentication no" on sshd_config, PAM
authentication is
completely disabled.
Most users won't realize it because sshd fallbacks to shadow auth, but
aditional
restrictions on PAM conf will not work.  You can confirm this behavior by
enabling/disabling ChallengeResponseAuthentication and requiring pam_deny.so for
sshd auth.

It was working on versions up to 3.7.1p2



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.