[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#848110: openssh-server: Please add a note in the sshd_config file that UsePAM must be set to yes with systemd/logind



user production@infomaniak.com
usertag 751636 + infomaniak.com-authentication
usertag 848110 + infomaniak.com-authentication
block 848110 by 751636
thanks

Hi there,

On Wed, 14 Dec 2016 08:59:28 +0100, Laurent Bigonville wrote:
> In regard to bug #751636,

Even if (now) useless, I added a blocking relationship for the two bugs.

> shouldn't a warning be added in the
> sshd_config file above the UsePAM parameter that it needs to be set to
> "yes" (and have pam_systemd in the stack) otherwise it could cause some
> issues?

FWIW, UsePAM defaults to yes since 1:3.8.1p1-1:

--8<---------------cut here---------------start------------->8---
openssh (1:3.8.1p1-1) unstable; urgency=low
[...]
  * Make sure there's a newline at the end of sshd_config before adding
    'UsePAM yes' (closes: #244829).
[...]
 -- Colin Watson <cjwatson@debian.org>  Tue, 11 May 2004 23:38:10 +0100
--8<---------------cut here---------------end--------------->8---

Thus, we need Suggests: libpam-systemd *and* the note either in the
sshd_config file or in the README.Debian.

Thx, bye,
Gismo / Luca

-- 
Luca Capello
Administrateur GNU/Linux

Infomaniak Network SA

Attachment: signature.asc
Description: Digital signature


Reply to: