SSH PAM authentication/login with a new user DB (through NSS)

Peter Stuge peter at stuge.se
Thu Feb 5 10:33:09 EST 2009


Christian Pfaffel-Janser wrote:
> > Any of your expert comments would be greatly appreciated.
> 
> just a wild guess, does it work if You turn PriviledgeSeparation off.

Yes, disabling PrivilegeSeparation (speling) might help for debugging
but it's not a recommended general solution.

Darren Tucker has written a PAM test harness that you could try with
your PAM module to maybe get more information on what is going wrong.

I found http://dtucker.freeshell.org/patches/pam-test-harness.c but
am unsure if it is the very latest version. Darren?


//Peter


More information about the openssh-unix-dev mailing list