Regarding PAM_TTY_KLUDGE and Solaris 8...

[Ed Phillips]

On Fri, 26 Oct 2001, Damien Miller wrote:

> Date: Fri, 26 Oct 2001 10:23:32 +1000 (EST)
> From: Damien Miller <djm at mindrot.org>
> To: Ed Phillips <ed at UDel.Edu>
> Cc: Markus Friedl <markus at openbsd.org>,
>      Darren Moffat <Darren.Moffat at eng.sun.com>, openssh-unix-dev at mindrot.org
> Subject: Re: Regarding PAM_TTY_KLUDGE and Solaris 8...
>
> On Thu, 25 Oct 2001, Ed Phillips wrote:
>
> > On Thu, 25 Oct 2001, Markus Friedl wrote:
> >
> > > Date: Thu, 25 Oct 2001 15:54:10 +0200
> > > From: Markus Friedl <markus at openbsd.org>
> > > To: Ed Phillips <ed at UDel.Edu>
> > > Cc: Damien Miller <djm at mindrot.org>,
> > >      Darren Moffat <Darren.Moffat at eng.sun.com>, openssh-unix-dev at mindrot.org
> > > Subject: Re: Regarding PAM_TTY_KLUDGE and Solaris 8...
> > >
> > > On Thu, Oct 25, 2001 at 09:47:40AM -0400, Ed Phillips wrote:
> > > > Do we want to see a lastlog entry for
> > > > "ssh" whenever a user runs remote command?
> > >
> > > no.
> >
> > Well, that's what happens when you call pam_open_session with TTY set to
> > "NODEVssh"... ;-)
>
> Only because you have a pam_lastlog session module.

On Solaris, by default, with pam_unix.so, and that's the only session
module that comes stock AFAIK.

Anyway, even Sun's apps that don't have a tty (like in.ftpd) set PAM_TTY
to something like "sshd<pid>", so who are we to argue... ;-)

	Ed

Ed Phillips <ed at udel.edu> University of Delaware (302) 831-6082
Systems Programmer III, Network and Systems Services
finger -l ed at polycut.nss.udel.edu for PGP public key