search for: ryan_cox

...d Product: Portable OpenSSH Version: -current Hardware: All OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: PAM support Assignee: unassigned-bugs at mindrot.org Reporter: ryan_cox at byu.edu Created attachment 2583 --> https://bugzilla.mindrot.org/attachment.cgi?id=2583&action=edit openssh_permit_gid_override.diff I would like to allow pam_setcred/pam_sm_setcred to override the gid that is normally set for a user. Currently the openssh code calls do_pam_setcred t...

...n sshd_config Product: Portable OpenSSH Version: 6.2p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: sshd Assignee: unassigned-bugs at mindrot.org Reporter: ryan_cox at byu.edu There is an option in ~/.authorized_keys to disable ~/.ssh/rc but none in sshd_config. We have hundreds of users and would like to disable ~/.ssh/rc globally so that /etc/ssh/sshrc will run for all users. A new option in sshd_config would be a good solution. I would be fine with eith...

Peter and Jason, thanks for your replies on this. I was able to accomplish this with a combination of Peter's solution and setting "AuthorizedKeysFile none" as suggested in the Stack Overflow question. On Wed, Mar 6, 2019 at 2:30 PM Peter Moody <mindrot at hda3.com> wrote: > > why aren't the authorized keys/principals commands sufficient? > > $ getent group

I've been looking for a while and can't figure out for sure if variables allowed by AcceptEnv are readable by a PAM module. I looked through the openssh source code and found a few calls to pam_putenv(), which looks like the relevant call, but I don't see anything that would copy over AcceptEnv variables. Am I correct that the variables are not available to PAM? I'm