[Bug 2876] PAM_TEXT_INFO and PAM_ERROR_MSG conversation not honoured during PAM authentication
bugzilla-daemon at bugzilla.mindrot.org
bugzilla-daemon at bugzilla.mindrot.org
Thu Jun 14 13:39:16 AEST 2018
https://bugzilla.mindrot.org/show_bug.cgi?id=2876
--- Comment #8 from Damien Miller <djm at mindrot.org> ---
Created attachment 3160
--> https://bugzilla.mindrot.org/attachment.cgi?id=3160&action=edit
assign ERROR_MSG/TEXT_INFO messages to kbd-int information field
I think we can just assign these messages to *info - this ends up in
the instruction field in SSH_MSG_USERAUTH_INFO_REQUEST and being
printed by the client too.
This would mean we send SSH_MSG_USERAUTH_INFO_REQUEST messages to the
client with no prompts, but this is permitted by the protocol AFAIK and
our client at least seems to support it (though I bet there are others
that will choke...)
We don't really have a choice though - we can't tell a priori what the
next message from the PAM subprocess is going to be and it will block
for prompt messages.
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
More information about the openssh-bugs
mailing list