I'm reporting a problem with documentation for openssh 3.7 portable. In the INSTALL file it says in the configure section: --with-md5-passwords will enable the use of MD5 passwords. Enable this if your operating system uses MD5 passwords without using PAM. The above verbage implies that if you use PAM there's no need to use the --with-md5-passwords option. This, I have discovered, is not true, at least on Redhat linux systems. When using PAM and MD5 passwords, you must use the above configure option AND the --with-pam option. If you don't, you won't be able to login using password authentication.... so, this wording should be changed to avoid further confusion and pain.... thanx, Steev Hise steev at detritus.net
steev hise wrote:> > I'm reporting a problem with documentation for openssh 3.7 portable. > > In the INSTALL file it says in the configure section: > > --with-md5-passwords will enable the use of MD5 passwords. Enable this > if your operating system uses MD5 passwords without using PAM. > > The above verbage implies that if you use PAM there's no need to use the > --with-md5-passwords option. > This, I have discovered, is not true, at least on Redhat linux systems.Good point. It used to be true when PAM was only a compile-time option, but as you've discovered it isn't any more. I will change that paragraph to read: --with-md5-passwords will enable the use of MD5 passwords. Enable this if your operating system uses MD5 passwords. The resulting binary will support both MD5 and traditional crypt type passwords. Thanks, -Daz. -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.
Possibly Parallel Threads
- Call for testing: OpenSSH 6.8
- ssh-agent build failure on AIX
- [PATCH] virtio-balloon: Avoid using the word 'report' when referring to free page hinting
- [PATCH] virtio-balloon: Avoid using the word 'report' when referring to free page hinting
- [PATCH v2] virtio-balloon: Avoid using the word 'report' when referring to free page hinting