Re: [tlug] OpenSSH-3.4

[Stoyan Zhekov <sto@example.com>]

> If I have it correct, aside from the Privilege thingie, you should
> also change the default ChallengeResponse from yes to no, correct?  Or
> was that only in the interim period, using 3.3?

ChallengeResponseAuthentication  no
UsePrivilegeSeparation           yes

My opinion: disable also password authentication:

PasswordAuthentication           no

and use public/private key pair only.

-- 
________  Stoyan Zhekov <sto [AT] zhware [DOT] net>  ________
OpenPGP:                http://www.zhware.net/keys/zhware.asc
fpr:        2A61 58D0 A69C FF68 4785 A0A3 89DE AEC0 3CA6 41A8
____________ Is there life after /sbin/halt -p? _____________

Attachment: pgp00026.pgp
Description: PGP signature