Mailing List Archive

[openssh] branch master updated: Expose SSH_AUTH_INFO_0 always to PAM auth modules.
This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

The following commit(s) were added to refs/heads/master by this push:
new c2c0bdd3 Expose SSH_AUTH_INFO_0 always to PAM auth modules.
c2c0bdd3 is described below

commit c2c0bdd3e96b3ef66d77fccb85ff4962dc76caf0
Author: Eero Häkkinen <Eero+git@xn--Hkkinen-5wa.fi>
AuthorDate: Sat Sep 16 00:55:08 2023 +0300

Expose SSH_AUTH_INFO_0 always to PAM auth modules.

This changes SSH_AUTH_INFO_0 to be exposed to PAM auth modules also
when a password authentication method is in use and not only
when a keyboard-interactive authentication method is in use.
---
auth-pam.c | 2 ++
1 file changed, 2 insertions(+)

diff --git a/auth-pam.c b/auth-pam.c
index b49d415e..e143304e 100644
--- a/auth-pam.c
+++ b/auth-pam.c
@@ -1375,6 +1375,8 @@ sshpam_auth_passwd(Authctxt *authctxt, const char *password)
fatal("PAM: %s: failed to set PAM_CONV: %s", __func__,
pam_strerror(sshpam_handle, sshpam_err));

+ expose_authinfo(__func__);
+
sshpam_err = pam_authenticate(sshpam_handle, flags);
sshpam_password = NULL;
free(fake);

--
To stop receiving notification emails like this one, please contact
djm@mindrot.org.
_______________________________________________
openssh-commits mailing list
openssh-commits@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-commits