Example of ChallengeResponseAuthentication in sshd_config

Balbir Singh
Balbir Singh used Ask the Experts™
on
I would like to use ChallengeResponseAuthentication directive in sshd_config want to set it yes. Basically I want a user to say/type yes before he attempts provide his password.

I am wondering how it can be achieved.

Thanks in advance!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Fractional CTO
Distinguished Expert 2018
Commented:
You'll search for something like - site:github.com ChallengeResponseAuthentication sshd_config PAM example OR tutorial - for examples of real world PAM modules to implement this type of scheme.

GitHub is a good starting point for various simple implementations of this type of PAM module.
https://blog.tankywoo.com/linux/2013/09/14/ssh-passwordauthentication-vs-challengeresponseauthentication.html

While it can be more secure than just regular password authentication, ssh keys should be better.
David FavorFractional CTO
Distinguished Expert 2018

Commented:
I'm with serialband.

Personally, I'd skip working with ChallengeResponseAuthentication.

Instead, use ssh keys.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial