[Bug 1188] keyboard-interactive should not allow retry after pam_acct_mgmt fails

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed May 3 13:06:39 EST 2006


http://bugzilla.mindrot.org/show_bug.cgi?id=1188


dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED




------- Comment #3 from dtucker at zip.com.au  2006-05-03 13:06 -------
(In reply to comment #2)
> Would it make sense to use a global flag? so a PAM authorization
> failure blocks all other methods...

I don't think that's necessary.  do_pam_account() caches its result and
it gets called in auth1.c or auth2.c.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list