Use "prohibit-password" in -portable comments.

"without-password" is the deprecated alias for "prohibit-password",
so we should reference the latter. From emaste at freebsd.org.

diff --git a/sshd_config b/sshd_config
index c423eba1b2ab75f727bae6eb4a54cbe2f5fa4c93..36894ace503d24ea714606c3a6b4d2be0a096a94 100644 (file)
--- a/sshd_config
+++ b/sshd_config
@@ -75,7 +75,7 @@ AuthorizedKeysFile    .ssh/authorized_keys
 # be allowed through the KbdInteractiveAuthentication and
 # PasswordAuthentication.  Depending on your PAM configuration,
 # PAM authentication via KbdInteractiveAuthentication may bypass
-# the setting of "PermitRootLogin without-password".
+# the setting of "PermitRootLogin prohibit-password".
 # If you just want the PAM account and session checks to run without
 # PAM authentication, then enable this but set PasswordAuthentication
 # and KbdInteractiveAuthentication to 'no'.