summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd.8
diff options
context:
space:
mode:
authorNiels Provos <provos@cvs.openbsd.org>2000-08-02 17:27:05 +0000
committerNiels Provos <provos@cvs.openbsd.org>2000-08-02 17:27:05 +0000
commit43ab6e433aad55cf3930f0db106d23e929504bcf (patch)
tree840d28f3b57c9d21994d8dace470a1b06548abfb /usr.bin/ssh/sshd.8
parent0f753be3f4ac9cc6889da1a7b2f81deea284183d (diff)
disallow kerberos authentication if we can't verify the TGT; from
dugsong@ kerberos authentication is on by default only if you have a srvtab.
Diffstat (limited to 'usr.bin/ssh/sshd.8')
-rw-r--r--usr.bin/ssh/sshd.84
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.bin/ssh/sshd.8 b/usr.bin/ssh/sshd.8
index e5c6f28364c..899f227a9c6 100644
--- a/usr.bin/ssh/sshd.8
+++ b/usr.bin/ssh/sshd.8
@@ -9,7 +9,7 @@
.\"
.\" Created: Sat Apr 22 21:55:14 1995 ylo
.\"
-.\" $Id: sshd.8,v 1.59 2000/08/02 16:27:16 provos Exp $
+.\" $Id: sshd.8,v 1.60 2000/08/02 17:27:04 provos Exp $
.\"
.Dd September 25, 1999
.Dt SSHD 8
@@ -386,7 +386,7 @@ is yes, the password provided by the user will be validated through
the Kerberos KDC. To use this option, the server needs a
Kerberos servtab which allows the verification of the KDC's identity.
Default is
-.Dq no .
+.Dq yes .
.It Cm KerberosOrLocalPasswd
If set then if password authentication through Kerberos fails then
the password will be validated via any additional local mechanism