[PATCH] Specify PAM Service name in sshd_config

Flavien Lebarbe flavien-ssh at lebarbe.net
Tue May 14 07:16:54 EST 2013


> The attached patch allows openssh to specify which pam service name to
> authenticate users against by specifying the PAMServiceName attribute in
> the sshd_config file.  Because the parameter can be included in the Match
> directive sections, it allows different authentication based on the Match
> directive.  In our case, we use it to allow different levels of
> authentication based on the source of the authentication attempts
> (securID auth in untrusted zones, password auth in trusted zones).  The
> default is still to use the binary name.

Have a look at this thread :
http://thread.gmane.org/gmane.network.openssh.devel/9576

My old attempt at solving the same issue is now 10 years old. Oh well...
http://article.gmane.org/gmane.network.openssh.devel/4247


Hope this helps,

Flavien.


More information about the openssh-unix-dev mailing list