[openssh-commits] [openssh] branch master updated: Expose SSH_AUTH_INFO_0 always to PAM auth modules.

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

The following commit(s) were added to refs/heads/master by this push:
     new c2c0bdd3 Expose SSH_AUTH_INFO_0 always to PAM auth modules.
c2c0bdd3 is described below

commit c2c0bdd3e96b3ef66d77fccb85ff4962dc76caf0
Author: Eero Häkkinen <Eero+git at xn--Hkkinen-5wa.fi>
AuthorDate: Sat Sep 16 00:55:08 2023 +0300

    Expose SSH_AUTH_INFO_0 always to PAM auth modules.
    
    This changes SSH_AUTH_INFO_0 to be exposed to PAM auth modules also
    when a password authentication method is in use and not only
    when a keyboard-interactive authentication method is in use.
---
 auth-pam.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/auth-pam.c b/auth-pam.c
index b49d415e..e143304e 100644
--- a/auth-pam.c
+++ b/auth-pam.c
@@ -1375,6 +1375,8 @@ sshpam_auth_passwd(Authctxt *authctxt, const char *password)
 		fatal("PAM: %s: failed to set PAM_CONV: %s", __func__,
 		    pam_strerror(sshpam_handle, sshpam_err));
 
+	expose_authinfo(__func__);
+
 	sshpam_err = pam_authenticate(sshpam_handle, flags);
 	sshpam_password = NULL;
 	free(fake);

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.