OpenSSH programming

Frank Cusack fcusack at fcusack.com
Sat May 25 19:52:57 EST 2002


On Fri, May 24, 2002 at 12:29:44AM +1000, Damien Miller wrote:
> Yes, but you still need to hook PAM up to kbd-int properly. It is
> currently broken with privsep. 
> 
> I posted a patch about 3 weeks ago to make it work, but got no feedback.
> Since privsep is going to activate by default in future and (IMO)
> privsep is more important than PAM, people really should start testing
> this...

FWIW, I did make note of that but haven't tested 'cuz I'm not ready to
look at privsep yet (... although, mostly 'cuz it breaks PAM! argh)

IMHO PAM is more important.  I cannot have a functional sshd without PAM,
but I can without privsep.

/fc



More information about the openssh-unix-dev mailing list