Bug#238699: Debian bugs: sshd - PAM and password auth: fixed upstream
Hi.
Please excuse the multi-update, these bugs are somewhat related.
The upstream bug [1] for Debian bugs #242119, #238699, #247521, #250369
is now fixed in upstream's CVS.
The patch attached to the bug re-adds PasswordAuthentication via PAM.
Note that this uses a "blind" conversation that will fail if you have
anything beyond simple password authentication; however this is the best
that can be done within SSH's password authentication method. If you
need more comprehensive PAM support, set PasswordAuthentication=no and
use ChallengeResponse/keyboard-interactive.
[1] http://bugzilla.mindrot.org/show_bug.cgi?id=874
(If you're going to backport the patch, there's a couple of other
related patches in CVS that are not attached to the bug).
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
Reply to: