tis 2007-03-20 klockan 21:53 +0100 skrev Thomas M Steenholdt:
> However, since we're talking about the default configuration
> here, I feel this would make it "too hard" to get sshd set up initally.
> If we disable password auth completely, we would have to manually put
> public keys in place via USB keys or something. That's too much work.
Yes, correct, an ssh server that's on by default but with password auth
disabled is pointless, because it's completely unusable. There's no
point in requiring people to fiddle with it to make it work. Either you
leave it in a usable state by default or you disable it completely by
default.