openssh bugs - Apr 2007 - [Bug 1308] pam handling change breaks pam_abl module

http://bugzilla.mindrot.org/show_bug.cgi?id=1308

           Summary: pam handling change breaks pam_abl module
           Product: Portable OpenSSH
           Version: 4.6p1
          Platform: UltraSparc
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P2
         Component: PAM support
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: feldt at nhn.ou.edu


In upgrading from OpenSSH-4.3p2 to -4.6p1 we find that the pam_abl
module no longer functions properly.  It always has the error status
(passed to the cleanup function) set to 0 when pam_end is called now -
even if authentication failed.  This functioned properly in 4.3p2. 
This is for Solaris 8 on UltraSparc systems.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1308





------- Comment #1 from feldt at nhn.ou.edu  2007-04-21 05:29 -------
Created an attachment (id=1265)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1265&action=view)
syslog output from sshd and pam_abl




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1308





------- Comment #2 from djm at mindrot.org  2007-04-21 10:03 -------
Those cleanup messages are from pam_abl, not sshd. Have you contacted
the pam_abl developers?




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1308


andy at hexten.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |andy at hexten.net




------- Comment #3 from andy at hexten.net  2007-04-22 11:31 -------
Hi there,

I'm the developer but I don't have access to Solaris to test against.
If someone is able to build and test a patched version for me I can
probably work out how to fix it.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1308





------- Comment #4 from feldt at nhn.ou.edu  2007-04-22 13:08 -------
I am willing to attempt to test this on one of my Solaris systems.  You
can contact me directly via e-mail and we can work on any details.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1308





------- Comment #5 from andy at hexten.net  2007-04-22 13:13 -------
Thanks - Darren Tucker has already offered so I'm going to use his box.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.