- markus@cvs.openbsd.org 2001/07/22 22:04:19

     [readconf.c ssh.1]
     enable challenge-response auth by default; ok millert@

diff --git a/ChangeLog b/ChangeLog
index 3530be02ca8cbaaef2f24dc778f6f37f52efdf69..d400183e90a130820428e02357245e2a64f06e7a 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,6 +7,9 @@
      [ssh.1]
      There is no option "Compress", point to "Compression" instead; ok 
      markus
+   - markus@cvs.openbsd.org 2001/07/22 22:04:19
+     [readconf.c ssh.1]
+     enable challenge-response auth by default; ok millert@
 
 20010803
  - (djm) Fix interrupted read in entropy gatherer. Spotted by markus@ on

diff --git a/readconf.c b/readconf.c
index 19b571a7121866b5e5dcd336577be77aef40bbd8..36700fbd5973a96fff63291c1763f2c8adedf0cb 100644 (file)
--- a/readconf.c
+++ b/readconf.c
@@ -12,7 +12,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: readconf.c,v 1.82 2001/06/26 16:15:23 dugsong Exp $");
+RCSID("$OpenBSD: readconf.c,v 1.83 2001/07/22 22:04:19 markus Exp $");
 
 #include "ssh.h"
 #include "xmalloc.h"
@@ -803,7 +803,7 @@ fill_default_options(Options * options)
        if (options->pubkey_authentication == -1)
                options->pubkey_authentication = 1;
        if (options->challenge_response_authentication == -1)
-               options->challenge_response_authentication = 0;
+               options->challenge_response_authentication = 1;
 #if defined(KRB4) || defined(KRB5)
        if (options->kerberos_authentication == -1)
                options->kerberos_authentication = 1;

diff --git a/ssh.1 b/ssh.1
index a4f040a47dece22e65b3a2f0ffe6dc4def7e8754..f8d9fc6890b2f1ef0966f84d90380f9ec17b9425 100644 (file)
--- a/ssh.1
+++ b/ssh.1
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ssh.1,v 1.121 2001/07/22 21:32:42 pvalchev Exp $
+.\" $OpenBSD: ssh.1,v 1.122 2001/07/22 22:04:19 markus Exp $
 .Dd September 25, 1999
 .Dt SSH 1
 .Os
@@ -1012,15 +1012,12 @@ The default is
 Note that this option applies to protocol version 1 only.
 .It Cm ChallengeResponseAuthentication
 Specifies whether to use challenge response authentication.
-Currently there is only support for
-.Xr skey 1
-authentication.
 The argument to this keyword must be
 .Dq yes
 or
 .Dq no .
 The default is
-.Dq no .
+.Dq yes .
 .It Cm StrictHostKeyChecking
 If this flag is set to
 .Dq yes ,