[Bug 2876] PAM_TEXT_INFO and PAM_ERROR_MSG conversation not honoured during PAM authentication

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Jun 13 22:56:55 AEST 2018


https://bugzilla.mindrot.org/show_bug.cgi?id=2876

--- Comment #6 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Damien Miller from comment #4)
> The code below that comment appears to be filling in the
> challenge-response prompts, which gets sent immediately via

It's dependent on the ordering of the PAM messages with the
conversation struct.  INFO first will probably work, PROMPT_ECHO.*
probably won't.

> AFAIK this already supports multiple rounds of prompting, but maybe
> the PAM code doesn't? I'm rusty on that...

It sort of does but not in the general case.  The way it currently
works with only one prompt per round was required for SSH1 TIS but not
SSH2 keyboard-int.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list