[Bug 983] Required authentication

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Tue Sep 13 05:49:16 EST 2011


https://bugzilla.mindrot.org/show_bug.cgi?id=983

--- Comment #40 from David Woodhouse <dwmw2 at infradead.org> 2011-09-13 05:49:16 EST ---
(In reply to comment #33)
> Created attachment 1999 [details]
> Updated to -current
> 
> Updated patch to -current and 5.8p1. Appears to work with
> sshd_config->RequiredAuthentications2 publickey,password.

I take it we've dropped the 'necessary but not sufficient' bit?

This looks wrong: Don't we want SSHCFG_ALL in each of the new additions
here?:

@@ -451,6 +456,8 @@ static struct {
     { "trustedusercakeys", sTrustedUserCAKeys, SSHCFG_ALL },
     { "authorizedprincipalsfile", sAuthorizedPrincipalsFile,
SSHCFG_ALL },
     { "kexalgorithms", sKexAlgorithms, SSHCFG_GLOBAL },
+    { "requiredauthentications1", sRequiredAuthentications1 },
+    { "requiredauthentications2", sRequiredAuthentications2 },
     { "ipqos", sIPQoS, SSHCFG_ALL },
     { NULL, sBadOption, 0 }
 };

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the reporter of the bug.


More information about the openssh-bugs mailing list