[Bug 3148] Unable to perform host-based authentication as root if "IgnoreRhosts" is set to "yes" on server configuration

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3148

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org,
                   |                            |dtucker at dtucker.net
   Attachment #3380|                            |ok?(dtucker at dtucker.net)
              Flags|                            |

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
Created attachment 3380
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3380&action=edit
allow IgnoreRhosts to appear in a Match block

I don't think we want to change the current behaviour of refusing root
for /etc/hosts.equiv as that is likely to be surprising, so I think the
easiest way around this is to allow IgnoreRhosts to appear in a Match
block. Then you'll be able to do something like:

IgnoreRhosts yes
HostbasedAuthentication yes

Match user root
    IgnoreRhosts no

to enable .shosts just for root

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.