Re: [SLUG] Firewall security audit report

[Ian Tester]

On Tue, 27 Feb 2001, chesty wrote:

> We were advised to turn sshd PasswordAuthentication off because it allows
> clear text passwords. 
> hey? That doesn't sound right.

from ssh(1):

     If other authentication methods fail, ssh prompts the user for a pass-
     word.  The password is sent to the remote host for checking; however,
     since all communications are encrypted, the password cannot be seen by
     someone listening on the network.

As someone else suggested, withold their payment for not even being able 
to read man pages :)

-- 
8<--------8<--------8<--------8<--------8<--------8<--------8<--------
Ian Tester   *8)#          \7\    LINUX: because geeks will find a way
[EMAIL PROTECTED]       \7\      http://www.zipworld.com.au/~imroy



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug