Mailing List Archive

[Bug 713] PAM and "PermitRootLogin without-password" still allows root password login
http://bugzilla.mindrot.org/show_bug.cgi?id=713

Summary: PAM and "PermitRootLogin without-password" still allows
root password login
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: Solaris
Status: NEW
Severity: major
Priority: P2
Component: PAM support
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: iand@ekit-inc.com


With 3.7.1p1 and 3.7.1p2 (at least) on Solaris 7, 8 (at least), enabling UsePAM
with "PermitRootLogin without-password" still allows root logins with password
authentication. (compiled --with-pam)

Disabling UsePAM works to restore expected behaviour; ie: password authentication
fails as it should, which is my workaround, but I want to use PAM in the
future.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 713] PAM and "PermitRootLogin without-password" still allows root password login [ In reply to ]
http://bugzilla.mindrot.org/show_bug.cgi?id=713





------- Additional Comments From djm@mindrot.org 2003-09-24 22:01 -------
When you use PAM you are not using password authentication anymore. You should
control root auth in PAM using the pam_rootok or pam_listfile modules.

perhaps we need a README.PAM file...



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.