3.2.3p1/auth-pam.c: PAM_PROMPT_ECHO_OFF in INITIAL_LOGIN pam state

Markus Friedl markus at openbsd.org
Fri May 31 18:39:37 EST 2002

On Thu, May 30, 2002 at 10:43:54PM +0000, sslannounce at myrealbox.com wrote:
> I have been unable to use any challenge/response based pam module (eg. 
> pam_opie.so) for ssh authentication, because the challenge (needed to
> compute an appropriate response) is never shown during login.
> do_pam_conversation() in auth-pam.c will not print any prompts while in the
> INITIAL_LOGIN state, queueing them for later printing. 
> Should users be able to override this (usually correct) default
> behaviour, perhaps by means of a sshd configuration variable ?

shouln't the pam module tell auth-pam.c whether echo should be on
or off?

More information about the openssh-unix-dev mailing list