Bug#342157: openssh-server: calls PAM auth and setcred in different contexts
Russ Allbery <rra@debian.org> writes:
> It would be very nice if openssh-server could be modified to not fork
> that separate [pam] subprocess and instead do the PAM authentication
> calls in the parent process. I expect this will break various other PAM
> modules that rely on the separation between pam_authenticate and
> pam_setcred.
Er, I suspect that the *current behavior* will break various other PAM
modules that rely on the separation between pam_authenticate and
pam_setcred. Not forking the separate process would be the fix.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: