Post #2130429
2026-04-28 14:48 UTC
@phnt @mia @navi OpenSSH at least allows to disable PAM and I would highly encourage doing so as it can end up allowing password-auth even with PasswordAuthentication no
Replies (2)
-
@mia@shrimptest.0x0.st 2026-04-28 14:50
@lanodan @navi @phnt openssh only uses PAM for account and session checks with PasswordAuthentication no and UsePAM yes. it won’t allow password auth with that
-
@phnt@fluffytail.org 2026-04-28 14:58
@lanodan @mia @navi Debian allows UsePAM no I think, but RHEL will complain about it. https://git.almalinux.org/rpms/openssh/src/branch/c8/SOURCES/openssh-7.8p1-UsePAM-warning.patch