3.2.3p1/auth-pam.c: PAM_PROMPT_ECHO_OFF in INITIAL_LOGIN pam state

sslannounce at myrealbox.com sslannounce at myrealbox.com
Fri May 31 08:43:54 EST 2002

I have been unable to use any challenge/response based pam module (eg. 
pam_opie.so) for ssh authentication, because the challenge (needed to
compute an appropriate response) is never shown during login.

do_pam_conversation() in auth-pam.c will not print any prompts while in the
INITIAL_LOGIN state, queueing them for later printing. 

Should users be able to override this (usually correct) default
behaviour, perhaps by means of a sshd configuration variable ?

More information about the openssh-unix-dev mailing list