[Bug 3987] PAMServiceName in Match block fails

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=3987

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
I think this is a bug introduced recently.  The current code in
servconf.h says after being reworked somewhat for the 10.4p1 release

#ifdef USE_PAM
#define SSHD_CONFIG_ENTRIES_PAM \
SSHCONF_INTFLAG(use_pam, UsePAM, SSHCFG_GLOBAL, 0, SSHCFG_COPY_NONE) \
SSHCONF_STRING(pam_service_name, PAMServiceName, SSHCFG_GLOBAL,
SSHCFG_COPY_NONE)
#else
#define SSHD_CONFIG_ENTRIES_PAM \
SSHCONF_UNSUPPORTED_INT(use_pam, UsePAM, SSHCFG_GLOBAL) \
SSHCONF_UNSUPPORTED_STRING(pam_service_name, PAMServiceName,
SSHCFG_GLOBAL)
#endif

(SSHCFG_GLOBAL means it's accepted only in the global section, not a
match block) however the equivalent code from 10.3p1 is:

#ifdef USE_PAM
        { "usepam", sUsePAM, SSHCFG_GLOBAL },
        { "pamservicename", sPAMServiceName, SSHCFG_ALL },
#else
        { "usepam", sUnsupported, SSHCFG_GLOBAL },
        { "pamservicename", sUnsupported, SSHCFG_ALL },
#endif

so the documentation is correct and the 10.4p1 code is not.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.