[Bug 512] Hostbased authentication bypass PAM

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=512

           Summary: Hostbased authentication bypass PAM
           Product: Portable OpenSSH
           Version: 3.5p1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: yaccck at yahoo.com


While using hostbased authentication, users are allowed to login,
even if i have "auth   required  /lib/security/pam_deny.so" set in
/etc/pam.d/sshd.

When i disable hostbased authentication, sshd behaves correctly.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.