Re: HEAD's UP: possible 0day SSH exploit in the wild
As far as I know, it does keys first then falls back to passwords. I'd
imagine PAM could help, but I'm not knowledgeable enough in regards to
that. I know you're only limited by your imagination when it comes to
PAM authentication. SSH-keys can (and should!) be password-protected
already.
-rb
On Wed, Jul 8, 2009 at 9:37 AM, Jim Popovitch<jimpop@gmail.com> wrote:
> On Wed, Jul 8, 2009 at 09:33, Roger Bumgarner<roger.bumgarner@gmail.com> wrote:
>> ALLOW rules and SSH-keys.
>
> Is there a way to force keys AND passwd verification?
>
> -Jim P.
>
>
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>
Reply to: