- enhanced openssh-chroot.patch with UseChroot configuration option

[packages/openssh.git] / opensshd.conf

diff --git a/opensshd.conf b/opensshd.conf
index 8c2281f741a62c7635a1b9be38577f8c7182f703..9a60fd1693114698189950eb0c9b0937fdc210e0 100644 (file)
--- a/opensshd.conf
+++ b/opensshd.conf
@@ -36,8 +36,6 @@ RSAAuthentication yes
 #PubkeyAuthentication yes
 #AuthorizedKeysFile    .ssh/authorized_keys
 
-# rhosts authentication should not be used
-RhostsAuthentication no
 # Don't read the user's ~/.rhosts and ~/.shosts files
 IgnoreRhosts yes
 # For this to work you will also need host keys in /etc/ssh_known_hosts
@@ -65,9 +63,10 @@ PermitEmptyPasswords no
 # Kerberos TGT Passing only works with the AFS kaserver
 #KerberosTgtPassing no
 
-# Set this to 'yes' to enable PAM keyboard-interactive authentication 
-# Warning: enabling this may bypass the setting of 'PasswordAuthentication'
-#PAMAuthenticationViaKbdInt yes
+# Set this to 'yes' to enable PAM authentication (via challenge-response)
+# and session processing. Depending on your PAM configuration, this may
+# bypass the setting of 'PasswordAuthentication'
+UsePAM yes
 
 X11Forwarding no
 X11DisplayOffset 10