Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 07 Mar 2000 09:16:35 +0800
From:      Peter Wemm <peter@netplex.com.au>
To:        "Andrew J. Korty" <ajk@iu.edu>
Cc:        Adrian Pavlykevych <pam@polynet.lviv.ua>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/lib/libpam/modules/pam_ssh Makefile 
Message-ID:  <20000307011635.C845D1CDE@overcee.netplex.com.au>
In-Reply-To: Message from "Andrew J. Korty" <ajk@iu.edu>  of "Mon, 06 Mar 2000 16:05:48 EST." <Pine.BSF.4.21.0003061559050.8137-100000@kobayashi.uits.iupui.edu> 

next in thread | previous in thread | raw e-mail | index | archive | help
"Andrew J. Korty" wrote:
> > Make pam_ssh work.  It had an undefined symbol when it was
> > dlopen()ed.  I'm not quite sure about this, I think it should be
> > using -lssh_pic since it's being linked into a .so, but nothing
> > seems to complain ahd it does work.  (well, it works for using
> > the authorized_keys file, but I have not figured out how to get
> > it to start a ssh-agent and cache the key for me)
>   
> Do you have this line in /etc/pam.conf?

No, there were no examples.  The thought never occurred to have a go
at xdm. :-)  I was trying to use 'login'.

> 	xdm session     optional        pam_ssh.so
> 
> Btw, we should really put some example lines in the default pam.conf file
> along the lines of
> 
> 	xdm auth        sufficient      pam_skey.so
> 	xdm auth        requisite       pam_cleartext_pass_ok.so
> 	xdm auth        sufficient      pam_ssh.so      try_first_pass
> 	xdm auth        required        pam_unix.so     try_first_pass
> 	xdm account     required        pam_unix.so
> 	xdm session     optional        pam_ssh.so

Definately, but just checking, are these functional lines? I'd hate to
mess something up.

BTW; what happens if we list pam_ssh.so and it wasn't compiled as the crypto
source isn't present?  Will it skip it or cause failures?

Cheers,
-Peter



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000307011635.C845D1CDE>