[PATCH]: Call pam_chauthtok from keyboard-interactive.

[Darren Tucker]

Andreas Girardet wrote:
> 
> Unfortunately I tried this out on RH ES2.1 and RH 9.0 without success.
> The same issue still persists. I am unable to get any pw change prompt.
> As a sidenote. I had to apply the patch manually as the diff file did
> not patch cleanly on openssh-3.7.1p2.

The patch is against -current, not 3.7.1p2.  This will only work if you
authenticate via keyboard-interactive authentication and PAM.

./configure --with-pam

In sshd_config:
UsePAM yes
ChallengeResponseAuthentication yes

In ssh_config:
PreferredAuthentications=keyboard-interactive.

(BTW, please don't CC: the bounce address).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.