[PATCH] PAM chauthtok + Privsep

[Darren Tucker]

MPak at dotsconnect.com wrote:
> Could somebody give me a hint on how to use the patch for password
> expiration?
> I am about to start "./configure" OpenSSH35p1. I have downloaded Darren
> Tucker's id#200, openssh-passwordpatch.11.

Please don't use patches 10 or 11, I've just found that they don't
correctly check for successful password change.  I'm working on it now.

> This patch has sections like "Index: acconfig.h" and "Index: auth-pam.c".
> Do I need to append these sections to appropriate files in the
> openssh-3.5.p1 directory?
> I have searched the net but could not find an explanation on its usage for
> non-developers like myself.
> 
> Also I am doing this to fix my first 3.5.p1 build which has a password
> expiration problem. Is there any work around, other than rebuilding package
> and reinstalling it on servers?

Patches 9 and up are against the current CVS tree and not 3.5p1 and
won't apply cleanly (ie you'll need to fix conflicts yourself).

What platform are you using?  There are a couple of patches that apply
to 3.5p1 but the one to use depends on your platform.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.