Re: debian-ssh@lists.debian.org in /usr/share/openssh/sshd_config

[Colin Watson <cjwatson@debian.org>]

On Sun, Jan 22, 2017 at 08:05:34PM +0100, foo fighter wrote:
> A  further note: the value for <ChallengeResponseAuthentication> is "no" in its default configuration. "man sshd_config" states "The default is yes.". Is this inconsistent?

You missed the bit right up at the top of sshd_config(5), which says:

     Note that the Debian openssh-server package sets several options as
     standard in /etc/ssh/sshd_config which are not the default in
     sshd(8):

           ·   ChallengeResponseAuthentication no
     [...]

"The default is yes" further down indicates that that's the default
built into sshd itself.

Thanks,

-- 
Colin Watson                                       [cjwatson@debian.org]