OpenBSD installer info prohibit-password > without-password ?

classic Classic list List threaded Threaded
5 messages Options
S-3
Reply | Threaded
Open this post in threaded view
|

OpenBSD installer info prohibit-password > without-password ?

S-3
when installing OpenBSD
Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password

after install , in /etc/sshd_config
PermitRootLogin without-password

so, why not using "without-password" at installation procedure for consistency?

Reply | Threaded
Open this post in threaded view
|

Re: OpenBSD installer info prohibit-password > without-password ?

ludovic coues
2015-11-01 8:56 GMT+01:00 S <[hidden email]>:
> when installing OpenBSD
> Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
>
> after install , in /etc/sshd_config
> PermitRootLogin without-password
>
> so, why not using "without-password" at installation procedure for consistency?
>

http://www.openbsd.org/errata58.html

--

Cordialement, Coues Ludovic
+336 148 743 42

Reply | Threaded
Open this post in threaded view
|

Re: OpenBSD installer info prohibit-password > without-password ?

Adam Van Ymeren
On 1 Nov 2015 7:06 a.m., "ludovic coues" <[hidden email]> wrote:
>
> 2015-11-01 8:56 GMT+01:00 S <[hidden email]>:
> > when installing OpenBSD
> > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
> >
> > after install , in /etc/sshd_config
> > PermitRootLogin without-password
> >
> > so, why not using "without-password" at installation procedure for
consistency?
> >
>
> http://www.openbsd.org/errata58.html

That doesn't really answer the question.

>
> --
>
> Cordialement, Coues Ludovic
> +336 148 743 42

Reply | Threaded
Open this post in threaded view
|

Re: OpenBSD installer info prohibit-password > without-password ?

Robert Peichaer
On Sun, Nov 01, 2015 at 11:18:41AM -0500, Adam Van Ymeren wrote:

> On 1 Nov 2015 7:06 a.m., "ludovic coues" <[hidden email]> wrote:
> >
> > 2015-11-01 8:56 GMT+01:00 S <[hidden email]>:
> > > when installing OpenBSD
> > > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
> > >
> > > after install , in /etc/sshd_config
> > > PermitRootLogin without-password
> > >
> > > so, why not using "without-password" at installation procedure for
> consistency?
> > >
> >
> > http://www.openbsd.org/errata58.html
>
> That doesn't really answer the question.

Maybe the actual commit message from deraadt@ explains it a bit better?
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?rev=1.97&content-type=text/x-cvsweb-markup

Reply | Threaded
Open this post in threaded view
|

Re: OpenBSD installer info prohibit-password > without-password ?

Stuart Henderson
In reply to this post by Adam Van Ymeren
On 2015-11-01, Adam Van Ymeren <[hidden email]> wrote:

> On 1 Nov 2015 7:06 a.m., "ludovic coues" <[hidden email]> wrote:
>>
>> 2015-11-01 8:56 GMT+01:00 S <[hidden email]>:
>> > when installing OpenBSD
>> > Alow root ssh login? (yes, no, prohibit-password) [no] prohibit-password
>> >
>> > after install , in /etc/sshd_config
>> > PermitRootLogin without-password
>> >
>> > so, why not using "without-password" at installation procedure for
>> > consistency?
>> >

Because it was changed very late in the release process. It probably should
be changed in the installer now.

>> http://www.openbsd.org/errata58.html
>
> That doesn't really answer the question.

It doesn't answer it at all, but it's something to watch out for if you're
using this setting.