openssh bugs - May 2004 - [Bug 874] (Re)Add PAM PasswordAuthentication support

http://bugzilla.mindrot.org/show_bug.cgi?id=874

           Summary: (Re)Add PAM PasswordAuthentication support
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: PAM support
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: dtucker at zip.com.au


The current PAM code requires clients to authenticate via challenge-response to
actually authenticate via PAM.  sshd should support PasswordAuthentication via
PAM as best it can (which requires a "blind" conversation function,
which is not
ideal but is the best that can be done within the limits of PAM and SSH's
password authentication).

This would also work with Kerberos/AFS PAM modules (bug #688).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |822
              nThis|                            |
             Status|NEW                         |ASSIGNED



------- Additional Comments From dtucker at zip.com.au  2004-05-28 18:53 -------
Target next major release.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  BugsThisDependsOn|                            |688





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874





------- Additional Comments From dtucker at zip.com.au  2004-05-28 20:31 -------
Created an attachment (id=644)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=644&action=view)
re-add PasswordAuthentication for UsePAM=yes

Works for me, but needs lots of testing and review.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #644 is|0                           |1
           obsolete|                            |



------- Additional Comments From dtucker at zip.com.au  2004-05-28 21:42 -------
Created an attachment (id=645)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=645&action=view)
re-add PasswordAuthentication and UsePAM take 2

Fix a couple of problems spotted by djm.  Logging of PAM errors was wrong too,
it's been removed for now but will be fixed later.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #645 is|0                           |1
           obsolete|                            |



------- Additional Comments From dtucker at zip.com.au  2004-05-28 23:06 -------
Created an attachment (id=646)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=646&action=view)
re-add PasswordAuthentication and UsePAM take 3

Fixed logging (debug only, failed password authentications are logged by the
main password code), made reused auth-pam.c code more consistent with current
code, added comments.  Tested OK on Redhat 9 and Solaris 8.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
    Attachment #646|                            |ok
             Status|                            |



------- Additional Comments From djm at mindrot.org  2004-05-29 12:29 -------
(From update of attachment 646)
ok by me




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=874

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From dtucker at zip.com.au  2004-05-30 20:53 -------
Thanks, committed to HEAD.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.