Re: OpenSSH 3.6.1 with PAM

From: Jerome Dsilva (djerome_at_novell.com)
Date: 08/27/03

  • Next message: Thomas Bange: "Problem with openssh?" 
    Date: Tue, 26 Aug 2003 22:35:27 -0600
To: <rio@martin.mu>, <secureshell@securityfocus.com>

    Replace --with-pam with --enable --with-pam=yes

    Jerome

    >>> Rio Martin <rio@martin.mu> 8/26/03 9:19:46 AM >>>
    Dear folks,
    I am new to this list.
    Today i want to change my OpenSSH from authenticating with MD5
    Passwords to
    PAM. I ve downloaded Linux-PAM from Kernel.Org and install it under my
    Linux
    with kernel 2.4.21.
    For OpenSSH i do configure with option --prefix=/usr/local/sshd
    --with-pam
    Is this enough already? or is there any more options that i should add
    ?

    Regards,
    Rio Martin. 

    -- 
The man who sets out to carry a cat by its tail learns something that
will always be useful and which never will grow dim or doubtful.
		-- Mark Twain.
  • Next message: Thomas Bange: "Problem with openssh?"

    Relevant Pages

    • Re: [Full-disclosure] anybody know good service for cracking md5?
      ... Actually dictionary attacks seem to work quite well, ... and/or well known passwords. ... Another idea which seems to be cropping in, is the use of hash ... > i find some sites which says that they can brute md5 ...
      (Full-Disclosure)
    • Re: Password aging on Suns with NIS?
      ... coding your own PAM module isn't an option for you ... > sources so they'd be the PAM-aware along with the whole PAM ... to change password. ... passwords and disabling accounts for those that don't. ...
      (comp.security.unix)
    • Re: secure login form
      ... For my point of view I'm thinking of using md5 passwords in db. ... If you want the avoid the man-in-the-middle eavesdropping on you: Then you need https, ... If you are afraid the username/password you store in your database is hacked somehow, then it can make sense to store them with an md5 hash, which is one-way encryption indeed. ... (You can propagate the sessionid from http to https via a form, and let the receiving script use that sessionid for its https session. ...
      (comp.lang.php)
    • Re: secure login form
      ... For my point of view I'm thinking of using md5 passwords in db. ... If you want the avoid the man-in-the-middle eavesdropping on you: Then you need https, ... If you are afraid the username/password you store in your database is hacked somehow, then it can make sense to store them with an md5 hash, which is one-way encryption indeed. ... (You can propagate the sessionid from http to https via a form, and let the receiving script use that sessionid for its https session. ...
      (comp.lang.php)
    • Re: [Full-disclosure] EasyJet is storing user passwords in the clear
      ... Salting makes the biggest difference on large datasets, ... $ openssl speed md5 ... Same for MD5 vs SHA1. ... The problem isn't in the algorithm -- it's in the passwords themselves. ...
      (Full-Disclosure)