[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: PAM_MOUNT and SSH



Murray Trainer wrote:
Are there any workarounds for the problem below.

[with pam_mount and...]


"Jan 21 15:38:07 SUSE92 PAM-warn[30346]: function=[pam_sm_acct_mgmt] service=[sshd] terminal=[ssh] user=[dawsona] ruser=[<unknown>] rhost=[localhost] Jan 21 15:38:07 SUSE92 sshd[30345]: Accepted keyboard-interactive/pam
for dawsona from ::ffff:127.0.0.1 port 1443 ssh2

For OpenSSH 3.9p1 and 4.0p1, you can set the following in sshd_config:


ChallengeResponseAuthentication no
PasswordAuthentication yes

For the gory details about why this problem fixes the problem, see:
http://bugzilla.mindrot.org/show_bug.cgi?id=688

There is also an issue with unmounting the the fs at logoff. There is a patch for that at the bug below, however that will only work when privsep is disabled.
http://bugzilla.mindrot.org/show_bug.cgi?id=926


If you're interested in testing a patch to fix it for privsep too (when I get a chance to write one, that is) please feel free to add yourself to the bug's CC list so you will get notified when it changes.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]