blob: 32c3ea5f08153bf5332b8af9076b00601530f6da [file] [log] [blame]
Patrick Williamsd8c66bc2016-06-20 12:57:21 -05001From b8cece92ba19aa77ac013ea161bfe4c7147747c9 Mon Sep 17 00:00:00 2001
2From: Jussi Kukkonen <jussi.kukkonen@intel.com>
3Date: Wed, 2 Dec 2015 11:36:02 +0200
4Subject: Enable pam
Patrick Williamsc124f4f2015-09-15 14:41:29 -05005
Brad Bishop1a4b7ee2018-12-16 17:11:34 -08006We need modify file default_options.h besides enabling pam in
Patrick Williamsc124f4f2015-09-15 14:41:29 -05007configure if we want dropbear to support pam.
8
9Upstream-Status: Pending
10
11Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
Patrick Williamsd8c66bc2016-06-20 12:57:21 -050012Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Patrick Williamsc124f4f2015-09-15 14:41:29 -050013---
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080014 default_options.h | 4 ++--
Patrick Williamsc124f4f2015-09-15 14:41:29 -050015 1 file changed, 2 insertions(+), 2 deletions(-)
16
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080017diff --git a/default_options.h b/default_options.h
Patrick Williams03907ee2022-05-01 06:28:52 -050018index 0e3d027..349338c 100644
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080019--- a/default_options.h
20+++ b/default_options.h
Patrick Williams03907ee2022-05-01 06:28:52 -050021@@ -210,7 +210,7 @@ group1 in Dropbear server too */
Patrick Williamsc124f4f2015-09-15 14:41:29 -050022
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080023 /* Authentication Types - at least one required.
24 RFC Draft requires pubkey auth, and recommends password */
25-#define DROPBEAR_SVR_PASSWORD_AUTH 1
26+#define DROPBEAR_SVR_PASSWORD_AUTH 0
Patrick Williamsc124f4f2015-09-15 14:41:29 -050027
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080028 /* Note: PAM auth is quite simple and only works for PAM modules which just do
29 * a simple "Login: " "Password: " (you can edit the strings in svr-authpam.c).
Patrick Williams03907ee2022-05-01 06:28:52 -050030@@ -218,7 +218,7 @@ group1 in Dropbear server too */
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080031 * but there's an interface via a PAM module. It won't work for more complex
32 * PAM challenge/response.
33 * You can't enable both PASSWORD and PAM. */
34-#define DROPBEAR_SVR_PAM_AUTH 0
35+#define DROPBEAR_SVR_PAM_AUTH 1
36
Patrick Williams03907ee2022-05-01 06:28:52 -050037 /* ~/.ssh/authorized_keys authentication.
38 * You must define DROPBEAR_SVR_PUBKEY_AUTH in order to use plugins. */
Patrick Williamsd8c66bc2016-06-20 12:57:21 -050039--
Patrick Williams03907ee2022-05-01 06:28:52 -0500402.25.1
Patrick Williamsd8c66bc2016-06-20 12:57:21 -050041