PAM sessions and conversation functions

Darren J Moffat Darren.Moffat at Sun.COM
Tue Oct 14 08:44:55 EST 2003


On Sat, 11 Oct 2003, Darren Tucker wrote:

> The second has two purposes: first is that pam_chauthtok_conv will spit
> the messages from the session modules onto stdout.  The second is that it
> appears sometimes (only some patchlevels?) Solaris tries to do a password
> change in the session module if the password is expired.

There is no Sun supplied PAM module (bundled or unbundled) that ever tries
to do a password change in pam_sm_open_session or pam_sm_close_session; and
there never has been.

--
Darren J Moffat




More information about the openssh-unix-dev mailing list