openssh bugs - Nov 2005 - [Bug 582] Add 'KbdintXORPasswordAuthentication' option.

http://bugzilla.mindrot.org/show_bug.cgi?id=582


djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




------- Comment #2 from djm at mindrot.org  2005-11-06 03:46 -------
WONTFIX - admins can just disable either PasswordAuthentication or
KbdInteractiveAuthentication if they are functionally equivalent. Our default
config, and most distributor configs do this already.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=582





------- Comment #3 from fcusack at fcusack.com  2005-11-07 19:33
-------
> admins can just disable either
That does not account for diversity in client features (support for kbdint) and
configuration.
The patch is trivial.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=582





------- Comment #4 from dtucker at zip.com.au  2005-11-07 20:50 -------
FWIW I'd rather see the requiredauthentication patch (bug #983) general
enough
to allow this to be expressed as a policy without needing an additional option
for it.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=582





------- Comment #5 from djm at mindrot.org  2005-11-07 21:16 -------
All of the clients that matter support kbdint and have for quite a while. 

Sure, the patch is simple, but it is a fiddly micro-option and we already have
too many knobs in sshd_config.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.