PAM, chauthtok and keyboard-interactive

Darren Tucker dtucker at zip.com.au
Thu Dec 18 19:03:00 EST 2003


Hi All.
	Today a patch was commited to OpenSSH that performs PAM password 
changes via SSH2 keyboard-interactive authentication.  I should work 
fine with privsep, which some of the other solutions have problems with.

	While the patch itself is relatively small, it's bigger than it should 
have been due to differences in PAM implementations.

	I encourage anyone with a interest in this to try a snapshot [1] 
(20031219 or later) and report success or failure here.

	Thanks,
		-Daz.

[1] ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/snapshot/ or one 
of its mirrors listed at http://www.openssh.com/portable.html

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.





More information about the openssh-unix-dev mailing list