PAM_MOUNT and SSH

Darren Tucker dtucker at zip.com.au
Wed Mar 16 05:30:52 UTC 2005


Murray Trainer wrote:
> Are there any workarounds for the problem below.  

[with pam_mount and...]

>>"Jan 21 15:38:07 SUSE92 PAM-warn[30346]: function=[pam_sm_acct_mgmt] 
>>service=[sshd] terminal=[ssh] user=[dawsona] ruser=[<unknown>] 
>>rhost=[localhost] 
>>Jan 21 15:38:07 SUSE92 sshd[30345]: Accepted keyboard-interactive/pam
>>for dawsona from ::ffff:127.0.0.1 port 1443 ssh2 

For OpenSSH 3.9p1 and 4.0p1, you can set the following in sshd_config:

ChallengeResponseAuthentication no
PasswordAuthentication yes

For the gory details about why this problem fixes the problem, see:
http://bugzilla.mindrot.org/show_bug.cgi?id=688

There is also an issue with unmounting the the fs at logoff.  There is a 
patch for that at the bug below, however that will only work when privsep 
is disabled.
http://bugzilla.mindrot.org/show_bug.cgi?id=926

If you're interested in testing a patch to fix it for privsep too (when I 
get a chance to write one, that is) please feel free to add yourself to 
the bug's CC list so you will get notified when it changes.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the Pam-list mailing list