2.9.9p2 bug in PAM support

Mark D. Roth roth at feep.net
Tue Oct 2 00:45:58 EST 2001


On Sat Sep 29 09:57 2001 +1000, Andrew Bartlett wrote:
> Brent A Nelson wrote:
> > With OpenSSH 2.9.9p2 as the server, I'm not able to do scp or "ssh
> > machinename command"  in general to any of my Suns!
> > 
> > I tracked this down a bit; the problem occurs only when PAM support is
> > enabled.  However, if I remove line 430 of session.c,
> > "do_pam_session(s->pw->pw_name, NULL);" inside of do_exec_no_pty, the
> > problem goes away.
> > 
> > It looks like the following entry in the Changelog may be responsible:
> > 
> >         20010627
> >          - (djm) Reintroduce pam_session call for non-pty sessions.
> > 
> > Let me know if you need any additional info to track this down.
> 
> What happens if you define PAM_TTY_KLUDGE and recompile?

FWIW, this does fix the problem.  Sounds to me like this should be
enabled by default on all PAM systems.

-- 
Mark D. Roth <roth at feep.net>
http://www.feep.net/~roth/



More information about the openssh-unix-dev mailing list