[Bug 1681] conversation function for passwd auth method assumes instead of fail

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Apr 23 11:59:30 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1681

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #8 from Damien Miller <djm at mindrot.org> 2010-04-23 11:59:29 EST ---
Yes, this is one of the (many) horrors of PAM. Unfortunately for the
reasons discussed we cannot ever really get rid of this (PAM_AUTHTOK is
Linux-only). On the other hand, it is quite well understood how PAM
must be configured to operate correctly with SSH password
authentication. 

If the thought of this assumption in password auth is too much for you,
you can disable PAM or use keyboard-interactive authentication which
makes no such assumptions.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list