Red: PAM auth with disabled user

Darren Tucker dtucker at zip.com.au
Thu Feb 2 20:34:28 EST 2006


On Wed, Feb 01, 2006 at 05:28:40PM -0800, Peter Michalek wrote:
> The patch you suggested works OK, I tried it on the snapshot of 1/28/06
> using a user authenticated via GSSAPI/Kerberos, with this result, which
> I think is acceptable:
[...]

It's not clear to me from the output, but does the connection close after
the PAM account check failed?

> Could we make this part of the openssh sourcebase?

I think so, once it's clear that it's doing what it is intended, which
is to make the behaviour more consistent with the different auth methods.
(Damien?)

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list