summaryrefslogtreecommitdiffstats
path: root/sshd_config.5
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2024-06-14 06:19:23 +0200
committerDamien Miller <djm@mindrot.org>2024-06-14 06:20:54 +0200
commitb2c64bc170d75823622a37cab3ca1804ca87ad16 (patch)
treed5b0772f2a8c6f4bd2d9a118dfd12a7380abe09c /sshd_config.5
parentupstream: don't redirect stderr for ssh-keyscan we expect to succeed (diff)
downloadopenssh-b2c64bc170d75823622a37cab3ca1804ca87ad16.tar.xz
openssh-b2c64bc170d75823622a37cab3ca1804ca87ad16.zip
add a sshd_config PamServiceName option
Allows selecting which PAM service name to use when UsePAM is enabled. Defaults to "sshd" unless overridden at compile time by defining SSHD_PAM_SERVICE. bz2102, ok dtucker@
Diffstat (limited to 'sshd_config.5')
-rw-r--r--sshd_config.59
1 files changed, 8 insertions, 1 deletions
diff --git a/sshd_config.5 b/sshd_config.5
index 11c341a9d..b228e905b 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -1368,10 +1368,17 @@ and
key exchange methods.
The default is
.Pa /etc/moduli .
+.It Cm PAMServiceName
+Specifies the service name used for Pluggable Authentication Modules (PAM)
+authentication, authorisation and session controls when
+.Cm UsePAM
+is enabled.
+The default is
+.Cm sshd .
.It Cm PasswordAuthentication
Specifies whether password authentication is allowed.
The default is
-.Cm yes .
+.Cm sshd .
.It Cm PermitEmptyPasswords
When password authentication is allowed, it specifies whether the
server allows login to accounts with empty password strings.