openssh unix dev - Jun 2001 - pam session in linux port

Hi,

Does anybody know why openssh (openssh-2.9p1) on a linux system does not call
pam_open_session if no pty is used? In this way the session modules (in
/etc/pam.d) are not activated.

This is especially annoying if you
use pam_limits.so to set rlimits. Every user could
circumvent them easily.

I do not know if this issue has been discussed before and if this behavior is
not alright .....

cu Christian

Christian Kraemer wrote:
> 
> Hi,
> 
> Does anybody know why openssh (openssh-2.9p1) on a linux system does not
call
> pam_open_session if no pty is used? In this way the session modules (in
> /etc/pam.d) are not activated.
> 
> This is especially annoying if you
> use pam_limits.so to set rlimits. Every user could
> circumvent them easily.
> 
> I do not know if this issue has been discussed before and if this behavior
is
> not alright .....
> 
> cu Christian
I posted a patch to correct this behaviour, but it seems to have been
ignored (I've certainly not heard back about it).

Andrew Bartlett

-- 
Andrew Bartlett
abartlet at pcug.org.au
abartlet at samba.org