[Bug 2861] LDAP user with public key authentication showing AUTHSTATE=compat

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sat Apr 28 11:55:23 AEST 2018


https://bugzilla.mindrot.org/show_bug.cgi?id=2861

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
The client side logs don't help here, instead what you are after might
be in the server-side logs (eg "/path/to/sshd -ddde -p 2022" to run it
on port 2022).

Looking at the code, it looks like sshd never sets AUTHSTATE, although
it will copy it into the shell child.  I think it'll be set by the
authenticate() call which does password auth, but that is does not get
called for publickey auth.

Given that it is not actually authenticating via LDAP what do you
expect it to do?

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list