SSH Bug 3.5p1 Expired Passwords

[Darren Tucker]

Frank Beckmann wrote:
> in the new Openssh 3.5p1 is the sam Bug as in the 3.4p1 :-(
> When a User try to login with a expired Passwort, SSH denys the Acces to the System

In pam-auth.c, change

#if 0
                case PAM_NEW_AUTHTOK_REQD:

to

#if 1
                case PAM_NEW_AUTHTOK_REQD:

and set "UsePrivilegeSeparation no" in sshd_config.

People have reported mixed success, so your milage may vary.

Let the list know how it goes; one of the reasons this isn't enabled in
3.5p1 is lack of testing.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.