[Bug 580] disable kbdint if host key mismatch

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri May 30 13:43:05 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=580





------- Additional Comments From fcusack at fcusack.com  2003-05-30 13:43 -------
My patch just arbitrarily disables kbdint.  An improvement would be to
#ifdef PAM around the disable bits, since kbdint is safe without PAM
(kbdint is used for internal challenge response methods).  Unfortunately,
with PAM you can't tell if it's safe to use or not, so to be on the safe
side it should be disabled.  An option could be added to control this, but
I think that's unwise (too many options).




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list