OpenSSH
[Top] [All Lists]

Re: OpenSSH and pam_ncp_auth.so

To: "Willis, Ben" <BenWillis@anderson5.net>
Subject: Re: OpenSSH and pam_ncp_auth.so
From: Darren Tucker <dtucker@zip.com.au>
Date: Fri, 23 Feb 2007 09:38:38 +1100
Cc: vandrove@vc.cvut.cz, openssh-unix-dev@mindrot.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <098B90F26175B74DB1F74126AEFC9C770411BC18@a5do-mail.acsd5.local>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
References: <098B90F26175B74DB1F74126AEFC9C770411BC18@a5do-mail.acsd5.local>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
User-agent: Thunderbird 1.5.0.9 (Windows/20061207)
Willis, Ben wrote:
> I have seen in the archives that several people have tried to use
> this module with OpenSSH. Now that the LTSP project has moved to LDM
> with SSH tunnels in Edubuntu I wondered if the issue with ssh
> requiring a local account to already exist could be revisited? Even
> though I know that the opinion has been that the module is 'broken'
> because some people believe that PAM should be used purely for
> authentication this limitation is making it VERY hard for those of us
> in the Education IT field.
> 
> Would it be possible to have a fix for this that could be applied if
> one wished?

See: http://bugzilla.mindrot.org/show_bug.cgi?id=1215

There's a patch for sshd and also some pointers to alternate solutions. 
  If you test the patch then please report your experiences (good or 
bad), preferably by adding a comment to the bug.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

<Prev in Thread] Current Thread [Next in Thread>