Mailing List Archive: [Bug 874] (Re)Add PAM PasswordAuthentication support

[Bug 874] (Re)Add PAM PasswordAuthentication support

bugzilla-daemon at mindrot

May 28, 2004, 12:51 AM

Post #1 of 8 (269 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

Summary: (Re)Add PAM PasswordAuthentication support
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: PAM support
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: dtucker@zip.com.au

The current PAM code requires clients to authenticate via challenge-response to
actually authenticate via PAM. sshd should support PasswordAuthentication via
PAM as best it can (which requires a "blind" conversation function, which is not
ideal but is the best that can be done within the limits of PAM and SSH's
password authentication).

This would also work with Kerberos/AFS PAM modules (bug #688).

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 12:53 AM

Post #2 of 8 (262 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
OtherBugsDependingO| |822
nThis| |
Status|NEW |ASSIGNED

------- Additional Comments From dtucker@zip.com.au 2004-05-28 18:53 -------
Target next major release.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 2:24 AM

Post #3 of 8 (263 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
BugsThisDependsOn| |688

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 2:31 AM

Post #4 of 8 (262 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

------- Additional Comments From dtucker@zip.com.au 2004-05-28 20:31 -------
Created an attachment (id=644)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=644&action=view)
re-add PasswordAuthentication for UsePAM=yes

Works for me, but needs lots of testing and review.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 3:42 AM

Post #5 of 8 (262 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #644 is|0 |1
obsolete| |

------- Additional Comments From dtucker@zip.com.au 2004-05-28 21:42 -------
Created an attachment (id=645)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=645&action=view)
re-add PasswordAuthentication and UsePAM take 2

Fix a couple of problems spotted by djm. Logging of PAM errors was wrong too,
it's been removed for now but will be fixed later.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 5:06 AM

Post #6 of 8 (262 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #645 is|0 |1
obsolete| |

------- Additional Comments From dtucker@zip.com.au 2004-05-28 23:06 -------
Created an attachment (id=646)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=646&action=view)
re-add PasswordAuthentication and UsePAM take 3

Fixed logging (debug only, failed password authentications are logged by the
main password code), made reused auth-pam.c code more consistent with current
code, added comments. Tested OK on Redhat 9 and Solaris 8.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 28, 2004, 6:29 PM

Post #7 of 8 (262 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

djm@mindrot.org changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #646| |ok
Status| |

------- Additional Comments From djm@mindrot.org 2004-05-29 12:29 -------
(From update of attachment 646)
ok by me

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 874] (Re)Add PAM PasswordAuthentication support [ In reply to ]

bugzilla-daemon at mindrot

May 30, 2004, 2:53 AM

Post #8 of 8 (263 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |FIXED

------- Additional Comments From dtucker@zip.com.au 2004-05-30 20:53 -------
Thanks, committed to HEAD.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.