Re: SSH package concerns...
On Tuesday 10 May 2005 17:46, Adam Skutt wrote:
> Pete Harlan wrote:
> > It would be nice if there were a way to have the pam module indicate,
> > "this failed, and that's final", as distinct from, "this failed so try
> > something else".
>
> There is. Mark the module "requisite", and a failure from it will stop
> the stack immediately.
Only for pam.
sshd is still free to try something else if pam returns a failure.
but sshd.conf contains the needed flags to limit the authentication methods
doing man sshd_config saids something like :
UsePAM = yes
PasswordAuthentication = no
might do the trick
>
> Adam
Reply to: