Should ChallengeResponseAuthentication be set to 'no' as well?

stribika / stribika.github.io

307 stars 33 forks source link

Should ChallengeResponseAuthentication be set to 'no' as well? #17

Closed jasonkarns closed 9 years ago

jasonkarns commented 9 years ago

Aren't ChallengeResponseAuthentication and PasswordAuthentication usually set in tandem (both enabled or both disabled)? If recommending to disable PasswordAuthentication, shouldn't ChallengeResponseAuthentication also be disabled? (unless using PAM with Google Authenticator)

stribika commented 9 years ago

Yeah, unless you actually configured PAM for something other than passwords. The way it is now, ssh asks me for a password if I delete the client keys.