Hi
and here's an feature request from a user/developer, wher I would like
to hear your comments again. Thanks
> The PAM_RHOST item, which tells PAM which remote host it is conversing
> with, is currently set by OpenSSH _after_ authentication is made. This
> is not a good thing for me, as a have written a module which needs the
> IP of the peer as a part of authentication.
> My module was written to eleminate the need for a patched ssh daemon so
> I was not happy to see that PAM_RHOST was not set until do_pam_account()
> which is called from within an 'if (authenticated)' in auth[12].c
> What I would like to see is a
> pam_set_item((pam_handle_t *)pamh, PAM_RHOST, get_canonical_hostname());
> as soon as possible in the code, before authentication.
Ciao
Christian
--
Debian Developer and Quality Assurance Team Member
1024/26CC7853 31E6 A8CA 68FC 284F 7D16 63EC A9E6 67FF 26CC 7853
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 242 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20001227/087973ff/attachment.bin
