bugzilla-daemon at bugzilla.mindrot.org
2007-Sep-17  20:55 UTC
[Bug 1364] New: default for ChallengeResponseAuthentication doesn' t match sshd_config
http://bugzilla.mindrot.org/show_bug.cgi?id=1364
           Summary: default for ChallengeResponseAuthentication doesn't
                    match sshd_config
           Product: Portable OpenSSH
           Version: 4.7p1
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: nate.yocom at centrify.com
between 4.5p1 and 4.6p1 the ChallengeResponseAuthentication parameter
stopped defaulting to 'yes' and must be explicitly set to work.  I
suspect this is the result of the Match keyword support that was added
- but it should either default correctly or the default sshd_config
should be updated to match.
-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2007-Sep-18  00:12 UTC
[Bug 1364] default for ChallengeResponseAuthentication doesn' t match sshd_config
http://bugzilla.mindrot.org/show_bug.cgi?id=1364
Darren Tucker <dtucker at zip.com.au> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
--- Comment #1 from Darren Tucker <dtucker at zip.com.au>  2007-09-18
10:12:11 ---
You've reported this against 4.7 however it should have been resolved
in that version:
   - dtucker at cvs.openbsd.org 2007/03/09 05:20:06
     [servconf.c sshd.c]
     Move C/R -> kbdint special case to after the defaults have been
     loaded, which makes ChallengeResponse default to yes again.  This
     was broken by the Match changes and not fixed properly
subsequently.
     Found by okan at demirmen.com, ok djm@ "please do it" deraadt@
Are you really having problems with 4.7 or did you mean to report it
against 4.6?
-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2007-Sep-18  00:17 UTC
[Bug 1364] default for ChallengeResponseAuthentication doesn' t match sshd_config
http://bugzilla.mindrot.org/show_bug.cgi?id=1364
Nate Yocom <nate.yocom at centrify.com> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED
--- Comment #2 from Nate Yocom <nate.yocom at centrify.com>  2007-09-18
10:17:07 ---
my apologies - it does in fact work for me in 4.7 (missed this in
initial testing)
-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2008-Apr-03  23:01 UTC
[Bug 1364] default for ChallengeResponseAuthentication doesn't match sshd_config
https://bugzilla.mindrot.org/show_bug.cgi?id=1364
Damien Miller <djm at mindrot.org> changed:
           What    |Removed                     |Added                       
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED                      
--- Comment #3 from Damien Miller <djm at mindrot.org>  2008-04-04
10:00:57 ---
Close resolved bugs after release.
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
Maybe Matching Threads
- [Bug 2475] New: Login failure when PasswordAuthentication, ChallengeResponseAuthentication, and PermitEmptyPasswords are all enabled
- sshd_config -> ChallengeResponseAuthentication
- Troubleshooting help?
- Troubleshooting help?
- Match and ChallengeResponseAuthentication