OpenSSH and PAM

[Paul Nicholas Faure]

Does OpenSSH support PAM fully ?
OpenSSH does not prompt the user for a new password if it has expired. It
simply says "Warning: You password has expired, please change it now".

My /etc/pam.d/sshd file is:
auth       required     /lib/security/pam_securetty.so
auth       required     /lib/security/pam_unix.so shadow nullok
auth       required     /lib/security/pam_nologin.so
account    required     /lib/security/pam_unix.so
password   required     /lib/security/pam_cracklib.so retry=3
password   required     /lib/security/pam_unix.so shadow nullok use_authtok nis
session    required     /lib/security/pam_unix.so
session    optional     /lib/security/pam_console.so

My /etc/pam.d/login file is the same as /etc/pam.d/sshd. And telnet
properly prompts me for a password.

-- 
Paul Faure					paul at paulfaure.com
Carleton University Systems Engineer 3rd Year	paul at porkchop.org
Engsoc Admin/BOG Technical Director		paul at engsoc.org