openssh bugs - May 2005 - [Bug 1045] Missing option for ignoring the /etc/nologin file

http://bugzilla.mindrot.org/show_bug.cgi?id=1045

           Summary: Missing option for ignoring the /etc/nologin file
           Product: Portable OpenSSH
           Version: 4.0p1
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: t8m at centrum.cz


On some systems /etc/nologin file can be processed by a PAM module or it can be
meant only for local console logins. sshd is missing an option to ignore this
file.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1045





------- Additional Comments From t8m at centrum.cz  2005-05-25 23:49 -------
Created an attachment (id=922)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=922&action=view)
Proposed patch

This patch adds a new IgnoreNologin option which implements this enhancement.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1045


ssh-bugs at nogin.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ssh-bugs at nogin.org






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1045





------- Additional Comments From dtucker at zip.com.au  2005-05-29 12:50 -------
I'm not sure sshd needs another knob for this.

Perhaps sshd should ignore /etc/nologin and leave it to the PAM modules.  The
session module could then do whatever it wants WRT the source of the login.  I
dunno.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1045





------- Additional Comments From t8m at centrum.cz  2005-05-30 05:48 -------
I would be happy enough with this solution too -> simply switch off nologin
checking if PAM is used.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1045





------- Additional Comments From djm at mindrot.org  2005-06-03 12:50 -------
I think that ignoring nologin for the PAM case is a good idea, but it is a
change that we will have to publicise.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.