[Bug 129] New: PAM with ssh authentication fails treat PAM_NEW_AUTHTOK_REQD properly

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=129

           Summary: PAM with ssh authentication fails treat
                    PAM_NEW_AUTHTOK_REQD properly
           Product: Portable OpenSSH
           Version: 3.0.2p1
          Platform: UltraSparc
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: b_smith44 at hotmail.com


when using ssh's authentication against either pam_unix or pam_krb5 expired 
passwords are not treated properly.

with pam_unix: sshd: users are not prompted to change their password and can 
login.

with pam_unix: scp: users are not prompted to change their password and can 
transfer files.

with pam_krb5: sshd: users are not prompted to change their password and cannot 
login.

with pam_krb5: scp: users are not prompted to change their password and can 
transfer files.


currently the only way to get expired passwords treated correctly by sshd is to 
use the system's login routine with pam_unix. there is no way to get scp to 
behave properly.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.