From 1dc8d93ce69d6565747eb44446ed117187621b26 Mon Sep 17 00:00:00 2001 From: "deraadt@openbsd.org" Date: Thu, 6 Aug 2015 14:53:21 +0000 Subject: upstream commit add prohibit-password as a synonymn for without-password, since the without-password is causing too many questions. Harden it to ban all but pubkey, hostbased, and GSSAPI auth (when the latter is enabled) from djm, ok markus Upstream-ID: d53317d7b28942153e6236d3fd6e12ceb482db7a --- sshd_config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'sshd_config') diff --git a/sshd_config b/sshd_config index 46df1622..4d77f05a 100644 --- a/sshd_config +++ b/sshd_config @@ -1,4 +1,4 @@ -# $OpenBSD: sshd_config,v 1.96 2015/07/30 19:23:02 deraadt Exp $ +# $OpenBSD: sshd_config,v 1.97 2015/08/06 14:53:21 deraadt Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. @@ -41,7 +41,7 @@ # Authentication: #LoginGraceTime 2m -#PermitRootLogin without-password +#PermitRootLogin prohibit-password #StrictModes yes #MaxAuthTries 6 #MaxSessions 10 -- cgit v1.2.1