On Thu, 2005-12-29 at 23:02 -0600, Robert Kulagowski wrote:
--snip--
> 4) Edit /etc/pam.d/ssh and look for the line:
> # Standard Un*x authentication.
> @include common-auth
> 
> Put a "#" infront of @include common-auth so that it's:
> [EMAIL PROTECTED] common-auth
> 
> This will restrict ssh from looking at /etc/passwd and /etc/shadow

I prefer editing /etc/ssh/sshd_config instead and setting
PasswordAuthentication to no. This ensures that when you ask the SSH
daemon to list its supported authentication methods it doesn't
mistakenly report password authentication. With the pam edit, you'll
still be prompted for a password, it will just be impossible for it to
succeed.

-- 
Alex Malinovich
Support Free Software, delete your Windows partition TODAY!
Encrypted mail preferred. You can get my public key from any of the
pgp.net keyservers. Key ID: A6D24837

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
mythtv-users mailing list
mythtv-users@mythtv.org
http://mythtv.org/cgi-bin/mailman/listinfo/mythtv-users

Reply via email to