summaryrefslogtreecommitdiffstats
path: root/lib/libc/sys
diff options
context:
space:
mode:
authormarkus <markus@openbsd.org>1999-10-07 21:45:02 +0000
committermarkus <markus@openbsd.org>1999-10-07 21:45:02 +0000
commit2cbe402d16f007786082e20001df33fdb6f80adb (patch)
treedb83314ae64407cb4f843ef29238e50d2f2d3006 /lib/libc/sys
parentuse pkg_add -I for ssl package (diff)
downloadwireguard-openbsd-2cbe402d16f007786082e20001df33fdb6f80adb.tar.xz
wireguard-openbsd-2cbe402d16f007786082e20001df33fdb6f80adb.zip
add skey to sshd:
1) pass *pw to auth_password() not user_name, do_authentication already keeps private copy of struct passwd for current user. 2) limit authentication attemps to 5, otherwise ssh -o 'NumberOfPasswordPrompts 100000' host lets you enter 100000 passwds 3) make s/key a run-time option in /etc/sshd_config 4) generate fake skeys, for s/key for nonexisting users, too limit auth-tries for nonexisting users, too. Note that % ssh -l nonexisting-user -o 'NumberOfPasswordPrompts 100000' host has NO limits in ssh-1.2.27
Diffstat (limited to 'lib/libc/sys')
0 files changed, 0 insertions, 0 deletions