PAM merge from FreeBSD

Frank Cusack fcusack at fcusack.com
Sat Jan 11 05:03:25 EST 2003


On Sat, Jan 11, 2003 at 01:08:15AM +1100, Damien Miller wrote:
> Frank Cusack wrote:
> > As a server admin, I would never use TIS for PAM unless I was strictly doing
> > challenge/response.  I would assume that the client is going to echo the
> > "response" entry.
> 
> The TIS support in the new patch defaults to echo off.

In openssh, sure.  Again, as a server admin, I would not trust that the
client is going to "work".  Echo on is actually the correct and better
behavior.

/fc




More information about the openssh-unix-dev mailing list