[PATCH] Password expiry with Privsep and PAM

[Darren Tucker]

Peter Stuge wrote:
> > I'll count the expect string library toward the size :-)
> 
> Ok, but I still believe it wont go near 10 KB, especially with some sort of
> compression.

I got criticism when the platform-specific part of my patch got to about
150 lines, I'm not sure what kind of reaction you're going to get
embedding a tiny expect-like interpreter into sshd.

You may be better of using keyboard-interactive (but that has its own
set of problems: you basically need to have a callback from privsep
master to slave).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.