mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Disable PAM when using only key-based authentication, otherwise keyboard-interactive fails. Fixes #6963

Browse Source
This commit is contained in:
jim-p 2016-11-25 15:08:29 -05:00
parent 6be782ed7c
commit ec64b0a8a6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/etc/sshd
View File

@ -139,6 +139,7 @@ if (isset($config['system']['ssh']['sshdkeyonly'])) {
$sshconf .= "ChallengeResponseAuthentication no\n";
$sshconf .= "PasswordAuthentication no\n";
$sshconf .= "PubkeyAuthentication yes\n";
$sshconf .= "UsePAM no\n";
} else {
$sshconf .= "# Login via Key and Password\n";
$sshconf .= "ChallengeResponseAuthentication yes\n";
@ -146,7 +147,6 @@ if (isset($config['system']['ssh']['sshdkeyonly'])) {
$sshconf .= "PubkeyAuthentication yes\n";
}
$sshconf .= "UseDNS no\n";
$sshconf .= "UsePAM no\n";
$sshconf .= "LoginGraceTime 30s\n";
/* Hide FreeBSD version */
$sshconf .= "VersionAddendum none\n";