Dont rely on PAMAuthenticationViaKbdInt default being 'no'

This commit is contained in:
Yang Tse 2008-01-27 02:35:20 +00:00
parent 5f2055729e
commit 8fca5c2e69

View File

@ -342,6 +342,7 @@ if((! -e $hstprvkeyf) || (! -e $hstpubkeyf) ||
# Match : OpenSSH 4.4.0 and later [3]
# MaxAuthTries : OpenSSH 3.9.0 and later
# MaxStartups : OpenSSH 2.2.0 and later
# PAMAuthenticationViaKbdInt
# PasswordAuthentication : OpenSSH 1.2.1 and later
# PermitEmptyPasswords : OpenSSH 1.2.1 and later
# PermitOpen : OpenSSH 4.4.0 and later [3]
@ -537,6 +538,9 @@ if(sshd_supports_opt('KeepAlive','no')) {
if(sshd_supports_opt('MaxAuthTries','10')) {
push @cfgarr, 'MaxAuthTries 10';
}
if(sshd_supports_opt('PAMAuthenticationViaKbdInt','no')) {
push @cfgarr, 'PAMAuthenticationViaKbdInt no';
}
if(sshd_supports_opt('PermitTunnel','no')) {
push @cfgarr, 'PermitTunnel no';
}