Hi. I can see that SSH partial success functionality was implemented very recently in the OpenSSH server. That's great news. I just tried it and I don't seem to be able to make it work with both public key authentication and password authentication through PAM. I wonder if this is a bug or something that won't be implemented for now or if this is still WIP and I should be more patient? -- Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 196 bytes Desc: not available URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20121122/f0ab66f9/attachment.bin>
On Thu, 22 Nov 2012, Pawel Jakub Dawidek wrote:> Hi. > > I can see that SSH partial success functionality was implemented very > recently in the OpenSSH server. That's great news. > > I just tried it and I don't seem to be able to make it work with both > public key authentication and password authentication through PAM. > I wonder if this is a bug or something that won't be implemented for now > or if this is still WIP and I should be more patient?Yes, there is a bug in there - the monitor is becoming confused by returns from monitor_read() that don't reset auth_method to an expected method name. I'll take a look. -d