forked from pool/openssh
6cd875acfc
- spec file cleanup (don't pointelssly build whole OpenSSH)
- spec file and patch cleanup
* removing obsoleted auditing patch
(openssh-%{version}-audit.patch)
- added patches from SLE
* GSSAPI key exchange
* FIPS enablement (currently disabled)
* small bugfixes
- split the LDAP helper into a separate package: openssh-akc-ldap
OBS-URL: https://build.opensuse.org/request/show/199679
OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=55
45 lines
1.5 KiB
Diff
45 lines
1.5 KiB
Diff
# force PAM in defaullt install (this was removed from upstream in 3.8p1)
|
|
# bnc#46749
|
|
|
|
diff --git a/openssh-6.2p2/sshd_config b/openssh-6.2p2/sshd_config
|
|
--- a/openssh-6.2p2/sshd_config
|
|
+++ b/openssh-6.2p2/sshd_config
|
|
@@ -60,17 +60,17 @@ AuthorizedKeysFile .ssh/authorized_keys
|
|
#HostbasedAuthentication no
|
|
# Change to yes if you don't trust ~/.ssh/known_hosts for
|
|
# RhostsRSAAuthentication and HostbasedAuthentication
|
|
#IgnoreUserKnownHosts no
|
|
# Don't read the user's ~/.rhosts and ~/.shosts files
|
|
#IgnoreRhosts yes
|
|
|
|
# To disable tunneled clear text passwords, change to no here!
|
|
-#PasswordAuthentication yes
|
|
+PasswordAuthentication no
|
|
#PermitEmptyPasswords no
|
|
|
|
# Change to no to disable s/key passwords
|
|
#ChallengeResponseAuthentication yes
|
|
|
|
# Kerberos options
|
|
#KerberosAuthentication no
|
|
#KerberosOrLocalPasswd yes
|
|
@@ -85,17 +85,17 @@ AuthorizedKeysFile .ssh/authorized_keys
|
|
# and session processing. If this is enabled, PAM authentication will
|
|
# be allowed through the ChallengeResponseAuthentication and
|
|
# PasswordAuthentication. Depending on your PAM configuration,
|
|
# PAM authentication via ChallengeResponseAuthentication may bypass
|
|
# the setting of "PermitRootLogin without-password".
|
|
# If you just want the PAM account and session checks to run without
|
|
# PAM authentication, then enable this but set PasswordAuthentication
|
|
# and ChallengeResponseAuthentication to 'no'.
|
|
-#UsePAM no
|
|
+UsePAM yes
|
|
|
|
#AllowAgentForwarding yes
|
|
#AllowTcpForwarding yes
|
|
#GatewayPorts no
|
|
X11Forwarding yes
|
|
#X11DisplayOffset 10
|
|
#X11UseLocalhost yes
|
|
#PrintMotd yes
|