Bug#236810: ssh: sshd_config: disable PasswordAuthentication if UsePAM?
Package: ssh
Version: 1:3.8p1-1
Hello,
man sshd_config points out:
UsePAM Enables PAM authentication (via challenge-response) and session
set up. If you enable this, you should probably disable
PasswordAuthentication. If you enable then you will not be able
to run sshd as a non-root user. The default is ``no''.
Since the debian package defaults to `UsePAM yes' and since
there seems to be no `PAMAuthenticationViaKbdInt no' anymore,
could you probably think about defaulting to `PasswordAuthentication no'
too (maybe one nearby the other)?
regards,
Mario
--
<jv> Oh well, config
<jv> one actually wonders what force in the universe is holding it
<jv> and makes it working
<Beeth> chances and accidents :)
Reply to: