| [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] |
On 07.10.2008 14:26, Tomas Mraz wrote:
On Tue, 2008-10-07 at 20:55 +1100, Darren Tucker wrote:Thorsten Kukuk wrote:On Mon, Oct 06, Max Bowsher wrote:I know about the special behaviour of "!" in a password field when SSH is managing authentication itself. My point is that this special behavior does NOT exist any more when SSH is authenticating via PAM - but I want it to!
...
Agreed, when sshd is configured to use PAM it delegates such things to it (as far as possible, anyway) so PAM is the right place to do this. Personally I think pam_unix should do this check in the account stack (there's also special-case handling of the *NP* string, for example) but that's probably a matter of taste.I agree that pam_unix should be modified to do this check in the account phase. I'll write a patch later.
Please don't make that behaviour compulsory, that will break many installations. It would be nice if it were controlled with some command line parameter of the module.
-- Sincerely Your, Dan. _______________________________________________ Pam-list mailing list Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list
|
|