[Bug 2408] Expose authentication information to PAM

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sat Jun 24 23:24:15 AEST 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2408

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2846|0                           |1
        is obsolete|                            |
   Attachment #2980|0                           |1
        is obsolete|                            |
                 CC|                            |dtucker at zip.com.au
   Attachment #2999|                            |ok?(dtucker at zip.com.au)
              Flags|                            |

--- Comment #11 from Damien Miller <djm at mindrot.org> ---
Created attachment 2999
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2999&action=edit
expose to PAM

User authentication information is now available via SSH_USER_AUTH when
sshd_config ExposeAuthInfo is enabled. The design drifted a little from
the last patch: the environment variable now points to a file that
contains the information rather than including it directly.

This patch implements the PAM part. The authentication information is
exposed to PAM session modules by a PAM environment variable
SSH_USER_AUTH_0, the "0" being a version number in case we ever need to
change the format.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list