Disabling logging during pam_authenticate

Damien Miller djm at mindrot.org
Sun Dec 26 13:50:53 EST 1999


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Is there any way to disable logging of failures during
pam_authenticate?

I ask because OpenSSH is currently generating an extra "authentication
failure..." message at each login.

The problem is that OpenSSH likes to try a blank password attempting
any other authentication. This is a shortcut for anonymous SSH servers
(e.g. OpenBSD's CVS repositories). I expect that this test will fail
in the vast majority of cases, but it speeds things up significantly
when it succeeds.

A way to disable authentication failure delays on a per-function call
basis would be great as well.

Regards,
Damien Miller

- --
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD4DBQE4ZYKRormJ9RG1dI8RAt65AKDQnVI8AClZFOcz1qVhxyPbGHNjXwCY8cNS
oLQgydP3KgSJVNZRsQ8e0w==
=5qe6
-----END PGP SIGNATURE-----






More information about the openssh-unix-dev mailing list