Re: sshd's PasswordAuthentication and UsePam options, and PR bin/32313

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Tue, 16 Sep 2008 22:52:08 -0400
Taylor R Campbell <campbell%mumble.net@localhost> wrote:

>    Date: Sat, 30 Aug 2008 00:57:19 +0200
>    From: Martin Husemann <martin%duskware.de@localhost>
> 
>    Me too. I would even suggest that we should ship a default sshd
> config that disables PAM.
> 
> Can someone either
> 
> - object,
> 
> - do something about this (e.g., just disable UsePam in the default
>   sshd_config, which is how sshd interprets its absence anyway), or
> 
> - ask that someone else (e.g., me) prepare specific patches?

I think disabling it in the default config is the right choice, but I'd
prefer that someone who understands how we handle changes to imported
software do it.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb