Keyboard-interactive authentication from a PAM module

Darren Tucker
Thu, 06 Nov 2008 01:13:02 -0000

Josele Lerele wrote:
> Hello,
>
> I am developing a PAM module that is called from OpenSSH server when a
> ssh-client wants to login in the machine. I want my module PAM to send a
> message to the ssh-client as soon as the PAM module is called by using the
> pam_info function, but I have checked that the message is not instantly
> shown in the client unless I send a prompt.
>
> I would like to find a way to send the message instantly from my PAM module
> without prompting. Any suggestions?

What version of OpenSSH are you using?  Modern versions will send a SSH2
banner message if they get a conversation request from PAM without a prompt.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.