[Bug 3481] New: PAM_TEXT_INFO messages are shown twice if they are the last conversation

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Oct 11 00:44:49 AEDT 2022


https://bugzilla.mindrot.org/show_bug.cgi?id=3481

            Bug ID: 3481
           Summary: PAM_TEXT_INFO messages are shown twice if they are the
                    last conversation
           Product: Portable OpenSSH
           Version: 8.4p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: PAM support
          Assignee: unassigned-bugs at mindrot.org
          Reporter: bugs at mrvanes.com

When the last conversation from PAM module is of type PAM_TEXT_INFO,
the last message "User admin has authenticated successfully" is
displayed twice as can be seen in the output from our module:

$ ssh ascz at client.vm.scz-vm.net
(ascz at client.vm.scz-vm.net) Please sign in to:
https://sbs.scz-vm.net/weblogin/weblogin/d8b054d3-8082-4278-8947-82973ffffb77
Verification code: 
User admin has authenticated successfully
User admin has authenticated successfully
Last login: Mon Oct 10 13:27:31 2022 from 172.20.1.1

The programs included with the Debian GNU/Linux system are free
software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.

However, when I add a conversation "Press Enter to continue" of type
PAM_PROMPT_ECHO_OFF just before the PAM module returns, I get this:

$ ssh ascz at client.vm.scz-vm.net
(ascz at client.vm.scz-vm.net) Please sign in to:
https://sbs.scz-vm.net/weblogin/weblogin/fd0cc5e5-a0f4-4eb6-a14b-68196ed7110f
Verification code: 
(ascz at client.vm.scz-vm.net) User admin has authenticated successfully
Press Enter to continue
Last login: Mon Oct 10 13:33:12 2022 from 172.20.1.1

The programs included with the Debian GNU/Linux system are free
software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.


Pamtester does not exhibit this behaviour.

The PAM module code, for reference:
https://github.com/SURFscz/pam-weblogin

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list