Mailinglist Archive: opensuse (1986 mails)

["Dominique Leuenberger" <Dominique.Leuenberger@xxxxxxxxxxxxx>]

> > > On 11/28/2008 at 1:47 PM, G T Smith
<grahamsmith@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Bob Williams wrote:
> > On Thursday 27 November 2008 15:03:29 David C. Rankin wrote:
> > > James Knott wrote:
> >
> > To turn off password checking, which of the following do I need to
modify 
> > in sshd.config?
>
> I am not sure this is a good idea. Just because you have moved the
> default port to a different value does *not* mean you should disable
> authentication. A more sophisticated scan is quite likely to
identify

I rather assume the user wanted to disabled password authentication in
favor of keybased authentication. If you read the thread in context,
this is at least what the story suggests.

I have this setup on my server and would not be afraid of it's
security.. or not more as with pw auth. Having keypair auth and no pass
sounds pretty good practice to me.

Dominique
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx