Re: sshd UsePAM, PR bin/32313

[Thor Lancelot Simon <tls%panix.com@localhost>]

On Sun, Nov 22, 2009 at 10:28:56PM +0100, Michael van Elst wrote:
> On Sun, Nov 22, 2009 at 04:23:09PM -0500, Thor Lancelot Simon wrote:
> 
> > No -- you *don't* want to do this -- you'll end up accepting Kerberos
> > passwords using ChallengeResponseAuthentication
> 
> As always, the computer does what you tell it. The question was
> how to disable password authentication and not how to disabled
> ChallangedResponseAuthentication.

I think you're confused.  If you disable PasswordAuthentication in the
sshd_config file, when pam_unix prompts for a password,
ChallengeResponseAuthentication is used.  If you're now claiming that that
is not a problem, why bother changing the PAM configuration at all?