[Bug 936] S/Key authentication fails if UsePAM=no

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Oct 7 17:56:46 EST 2004


http://bugzilla.mindrot.org/show_bug.cgi?id=936





------- Additional Comments From dtucker at zip.com.au  2004-10-07 17:56 -------
Created an attachment (id=725)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=725&action=view)
remove "pam" from kbdint devices if UsePAM=no

I looked at it too and removing the "pam" device is more invasive (in part,
because the KbdIntDevice list is statically allocated).  See attached.

This patch could be simpler if pam is moved to the end of the device list (but
that changes the default order for the skey+pam case).

It's a good point about SSHv1 support too, it won't work at all when usepam=no,
fixed in attached patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list