OpenSSH + PADL + password aging

Roylance, Stephen D. SROYLANCE at PARTNERS.ORG
Wed Dec 24 05:46:50 EST 2003

Both warnings and expiration messages work correctly with openssh-SNAP-20031221
and no other changes in my configuration.  Will the next release have this code
included?  When is that planned?

Thanks for your help,
Stephen Roylance
-----Original Message-----
From: Darren Tucker [mailto:dtucker at] 
Sent: Monday, December 22, 2003 6:41 PM
To: Roylance, Stephen D.
Cc: 'openssh-unix-dev at'
Subject: Re: OpenSSH + PADL + password aging

Roylance, Stephen D. wrote:
> First, my config:
> Solaris 8
> PADL pam_ldap v165 and pam_nss v211
> OpenSSH 3.7.1.p2
> All compiled with gcc 2.95.3 that ships with the Sun companion CD

 > I would like to turn on
 > password aging, which seems to be well supported by pam_ldap.

Could you please try a snapshot[1]?  There have been several PAM-related 
changes, including some code that does the changes via SSH2 
keyboard-interactive that works with privsep on.

[1] or one
of its mirrors listed at

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list