OpenSSH programming
Frank Cusack
fcusack at fcusack.com
Sat May 25 19:52:57 EST 2002
On Fri, May 24, 2002 at 12:29:44AM +1000, Damien Miller wrote:
> Yes, but you still need to hook PAM up to kbd-int properly. It is
> currently broken with privsep.
>
> I posted a patch about 3 weeks ago to make it work, but got no feedback.
> Since privsep is going to activate by default in future and (IMO)
> privsep is more important than PAM, people really should start testing
> this...
FWIW, I did make note of that but haven't tested 'cuz I'm not ready to
look at privsep yet (... although, mostly 'cuz it breaks PAM! argh)
IMHO PAM is more important. I cannot have a functional sshd without PAM,
but I can without privsep.
/fc
More information about the openssh-unix-dev
mailing list