Bug#369395: openssh-server: should /etc/pam.d/ssh read /etc/default/locale?

[Colin Watson <cjwatson@debian.org>]

tags 369395 pending
thanks

On Thu, Sep 28, 2006 at 03:45:21PM +0200, Raphael Hertzog wrote:
> On Mon, 29 May 2006, Andreas Beckmann wrote:
> > since the LC_* settings were moved from /etc/environment to
> > /etc/default/locale pam_env no longer reads and sets them.
> > See /usr/share/doc/locales/NEWS.Debian.gz for more information.
> > Perhaps the pam_env settings in /etc/pam.d/ssh should be changed to take
> > this into account.
> > /etc/pam.d/login is reading /etc/default/locale in addition to
> > /etc/environment and could be used as an example.
> 
> Indeed. Since this is a regression from sarge (as user are instructed to
> remove the LANG=* setting from /etc/environment), I believe the PAM
> configuration of ssh needs to be changed to match the configuration
> of login.
> 
> Here's a patch for /etc/pam.d/ssh:
[...]
> BTW, the pam documentation mentions pam_env as providing "auth-level" service
> but most packages put it in the session module which looks like logical. 
> So I change that here as well.
> 
> If there's a rationale for using auth, feel free to change it back.

I know this isn't the best of reasons, but precisely because I'm not
sure why we use auth, I'd rather leave it as it is.

Thanks for the patch; I've applied something similar in CVS.

Cheers,

-- 
Colin Watson                                       [cjwatson@debian.org]