author | Jan Parcel <jan.parcel@oracle.com> |
Fri, 21 Apr 2017 13:46:39 -0700 | |
branch | s11u3-sru |
changeset 7926 | 26093f5b918b |
parent 7320 | edeb951aa980 |
permissions | -rw-r--r-- |
7320
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
1 |
# |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
2 |
# Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved. |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
3 |
# |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
4 |
# PAM configuration for the SSH user authentication type of 'none' which is |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
5 |
# used when no authentication is required at all. This PAM fragment prevents |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
6 |
# authentication using sshd-none to avoid unnecessary interaction with |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
7 |
# failed logins tracking in certain SSH and PAM configurations. If SSH |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
8 |
# logins are desired without any authentication then this is possible by |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
9 |
# configuring both the sshd_config(5) options 'PasswordAuthentication' and |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
10 |
# 'PermitEmptyPasswords' to be 'yes' and using either the 'password' or |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
11 |
# 'keyboard-interactive' user authentication methods. |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
12 |
# |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
13 |
auth definitive pam_deny.so.1 |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
14 |
account definitive pam_deny.so.1 |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
15 |
session definitive pam_deny.so.1 |
edeb951aa980
24525860 upgrade OpenSSH to 7.3p1
Jan Parcel <jan.parcel@oracle.com>
parents:
diff
changeset
|
16 |
password definitive pam_deny.so.1 |