diff options
| author | jim-p <jimp@pfsense.org> | 2016-11-25 15:08:29 -0500 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2016-11-25 15:08:29 -0500 |
| commit | b35fc4331ac78f9459db00be04dc6b077f168593 (patch) | |
| tree | dc1d7e0b4a9f21c0079aef1e3790bf3cb1823524 /src/etc/sshd | |
| parent | 23a8dae002477b962a4d71ed6c9a0879b78a3816 (diff) | |
| download | pfsense-b35fc4331ac78f9459db00be04dc6b077f168593.zip pfsense-b35fc4331ac78f9459db00be04dc6b077f168593.tar.gz | |
Disable PAM when using only key-based authentication, otherwise keyboard-interactive fails. Fixes #6963
Diffstat (limited to 'src/etc/sshd')
| -rwxr-xr-x | src/etc/sshd | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/etc/sshd b/src/etc/sshd index 7c40f2d..64ab8d7 100755 --- a/src/etc/sshd +++ b/src/etc/sshd @@ -89,6 +89,7 @@ if (isset($config['system']['ssh']['sshdkeyonly'])) { $sshconf .= "ChallengeResponseAuthentication no\n"; $sshconf .= "PasswordAuthentication no\n"; $sshconf .= "PubkeyAuthentication yes\n"; + $sshconf .= "UsePAM no\n"; } else { $sshconf .= "# Login via Key and Password\n"; $sshconf .= "ChallengeResponseAuthentication yes\n"; @@ -96,7 +97,6 @@ if (isset($config['system']['ssh']['sshdkeyonly'])) { $sshconf .= "PubkeyAuthentication yes\n"; } $sshconf .= "UseDNS no\n"; -$sshconf .= "UsePAM no\n"; $sshconf .= "LoginGraceTime 30s\n"; /* Hide FreeBSD version */ $sshconf .= "VersionAddendum none\n"; |
