Hello, i'm confused on a couple variables in the sshd_config file, i have a client that's using that 'other os' and has an ssh client that he likes. however, he wanted me to secure the server as much as possible, i've always disabled clear text passwords(PasswordAuthentication no), and turn on pam auth (PAMAuthenticationViaKbdInt yes). That's always worked fine for me as i'm using debian linux, and i don't actually know why i do it other than in the conf file debian adds a comment above telling me to do so, so i do. Well, my clients ssh client app doesn't seem to be able to handle pam auth, so when i disable clear text passes it won't let him in, even though i can get in with his account from my ssh client. i guess what i'm asking is, "How much of a security risk is using regular auth versus Pam?".
thanks in advance for your help. steve -- "I have never let my schooling interfere with my education. " - Mark Twain - Steve Johnson - [EMAIL PROTECTED] - http://steve.webninja.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]