From 6c1beba7fb10ed33556e7c691a7d7923c22e3434 Mon Sep 17 00:00:00 2001
From: Garrett Honeycutt <code@garretthoneycutt.com>
Date: Fri, 28 Oct 2016 11:50:32 -0400
Subject: [PATCH] Document ChallengeResponseAuthentication on EL systems

---
 README.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index f278c7e..1a13b86 100644
--- a/README.md
+++ b/README.md
@@ -275,7 +275,10 @@ LoginGraceTime option in sshd_config.
 
 sshd_config_challenge_resp_auth
 -------------------------------
-ChallengeResponseAuthentication option in sshd_config.
+ChallengeResponseAuthentication option in sshd_config. RedHat defaults
+to setting this to no for EL 5, 6 and 7, though the module will set it
+to 'yes'. Suggest setting to 'no' with Hiera on EL systems. This will
+default to 'no' for those platforms in the next major release.
 
 - *Default*: 'yes'