[Bug 237270] pam_opieaccess does not support IPv6, or documentation is lacking

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237270

--- Comment #15 from Dag-Erling Smørgrav <des at FreeBSD.org> ---
(In reply to Victor Sudakov from comment #14)
> Isn't it configured as "sufficient" in the stock /etc/pam.d/sshd ?

Yes, for historical reasons: it was considered an adequate single factor 20+
years ago, so it was grandfathered in when we moved to PAM, and this decision
was never revisited. But it is very weak, and I doubt there are many people
still using it.

I considered adding support for a more modern algorithm, but it would require a
much larger dictionary and / or much longer phrases. I should have removed it a
long time ago; I will probably do so before 13.0.

-- 
You are receiving this mail because:
You are the assignee for the bug.