search for: pam_account_mgmt

http://bugzilla.mindrot.org/show_bug.cgi?id=1188 Summary: keyboard-interactive should not allow retry after pam_acct_mgmt fails Product: Portable OpenSSH Version: -current Platform: Other OS/Version: All Status: NEW Severity: normal Priority: P2 Component: PAM support

...ate their passwords. [/quote] Imagine my complete lack of surprise when this turns out to not be the case. Even with that flag, Solaris attempts to change the password regardless of whether or not it's expired. To work around this, I call do_pam_account early and cache the result to prevent pam_account_mgmt being called twice. It works on Redhat. Kind of. The prompts don't have newlines where they should, and although the password is updated successfully, the last-changed time isn't, so you'll have to change it at each login. Annoying, and I don't know why it does that. Still to...

https://bugzilla.mindrot.org/show_bug.cgi?id=3210 Bug ID: 3210 Summary: Confusing errors when pam_acct_mgmt() fails Product: Portable OpenSSH Version: 8.3p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: PAM support Assignee: