From owner-freebsd-current  Mon Jan 21  9:46:51 2002
Delivered-To: freebsd-current@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id AECCA37B400
	for <current@FreeBSD.ORG>; Mon, 21 Jan 2002 09:46:41 -0800 (PST)
Received: by flood.ping.uio.no (Postfix, from userid 2602)
	id F081F532C; Mon, 21 Jan 2002 18:46:37 +0100 (CET)
X-URL: http://www.ofug.org/~des/
X-Disclaimer: The views expressed in this message do not necessarily
  coincide with those of any organisation or company with
  which I am or have been affiliated.
To: "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc: mark@grondar.za, current@FreeBSD.ORG
Subject: Re: Step6, corresponding /etc/pam.d/* fixes for review
References: <20020121142038.GA36519@nagual.pp.ru>
	<xzpsn8zwwey.fsf@flood.ping.uio.no>
	<20020121154244.GC37234@nagual.pp.ru>
	<xzpbsfnwvfz.fsf@flood.ping.uio.no>
	<20020121161534.GE37234@nagual.pp.ru>
	<xzpu1tfvfib.fsf@flood.ping.uio.no>
	<20020121162726.GH37234@nagual.pp.ru>
	<xzplmervds6.fsf@flood.ping.uio.no>
	<20020121172526.GB38390@nagual.pp.ru>
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 21 Jan 2002 18:46:37 +0100
In-Reply-To: <20020121172526.GB38390@nagual.pp.ru>
Message-ID: <xzp7kqbvbpe.fsf@flood.ping.uio.no>
Lines: 40
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/21.1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

"Andrey A. Chernov" <ache@nagual.pp.ru> writes:
> I am not sure I understand this fully, could you please send two
> typescripts (in the manner you do for login testing) with and without this
> change?

Assuming no ~des/.opiealways,

 - without the change:

des@des ~% login des
otp-md5 496 de6973 ext
Password: <enter>
otp-md5 496 de6973 ext
Password [echo on]: <enter>
Login incorrect
login: <argh!>

 - with the change:

des@des ~% login des
otp-md5 496 de6973 ext
Password: <enter>
otp-md5 496 de6973 ext
Password [echo on]: <enter>
Password: <Unix password>
Last login: Mon Jan 21 17:10:55 on ttypk
Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994
        The Regents of the University of California.  All rights reserved.

FreeBSD 5.0-CURRENT (DES) #124: Sat Jan 12 19:11:47 CET 2002
You have new mail.

One nit, BTW: pam_opieaccess(8) should return PAM_SERVICE_ERR rather
than PAM_USER_UNKNOWN if it can't getpwnam() the user; otherwise,
logging in with a nonexistent user name will fail without a fake
password prompt.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message