- updated UsePAM comment from sources (semantics changed "a little")

Changed files:
    opensshd.conf -> 1.20

diff --git a/opensshd.conf b/opensshd.conf
index b39904f11a52cf59b07cf983513656d9de72ed41..c946bc68b168d93f98b4878c9ddf827e81897f60 100644 (file)
--- a/opensshd.conf
+++ b/opensshd.conf
@@ -64,9 +64,15 @@ PermitEmptyPasswords no
 # Kerberos TGT Passing only works with the AFS kaserver
 #KerberosTgtPassing no
 
-# Set this to 'yes' to enable PAM authentication (via challenge-response)
-# and session processing. Depending on your PAM configuration, this may
-# bypass the setting of 'PasswordAuthentication'
+# Set this to 'yes' to enable PAM authentication, account processing,
+# and session processing. If this is enabled, PAM authentication will
+# be allowed through the ChallengeResponseAuthentication and
+# PasswordAuthentication.  Depending on your PAM configuration,
+# PAM authentication via ChallengeResponseAuthentication may bypass
+# the setting of "PermitRootLogin without-password".
+# If you just want the PAM account and session checks to run without
+# PAM authentication, then enable this but set PasswordAuthentication
+# and ChallengeResponseAuthentication to 'no'.
 UsePAM yes
 
 # Set this to 'yes' to enable support for chrooted user environment.