OpenSSH + PADL pam_ldap.so + password aging

[Roylance, Stephen D.]

Both warnings and expiration messages work correctly with openssh-SNAP-20031221
and no other changes in my configuration.  Will the next release have this code
included?  When is that planned?

Thanks for your help,
Stephen Roylance
-----Original Message-----
From: Darren Tucker [mailto:dtucker at zip.com.au] 
Sent: Monday, December 22, 2003 6:41 PM
To: Roylance, Stephen D.
Cc: 'openssh-unix-dev at mindrot.org'
Subject: Re: OpenSSH + PADL pam_ldap.so + password aging

Roylance, Stephen D. wrote:
> First, my config:
> Solaris 8
> PADL pam_ldap v165 and pam_nss v211
> OpenSSH 3.7.1.p2
> All compiled with gcc 2.95.3 that ships with the Sun companion CD

 > I would like to turn on
 > password aging, which seems to be well supported by pam_ldap.

Could you please try a snapshot[1]?  There have been several PAM-related 
changes, including some code that does the changes via SSH2 
keyboard-interactive that works with privsep on.

[1] ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/snapshot/ or one
of its mirrors listed at http://www.openssh.com/portable.html

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.