Attachment 962 Details for Bug 1087 – Patch to send PAM messages to client even on PAM_SUCCESS

[patch] Patch to send PAM messages to client even on PAM_SUCCESS

pam-expiry.patch (text/plain), 1.19 KB, created by senthilkumar on 2005-09-22 21:30:01 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: senthilkumar

Created: 2005-09-22 21:30:01 AEST

Size: 1.19 KB

patch

obsolete

>--- openssh-4.2p1/auth2.c       2005-07-17 12:56:44.000000000 +0530
>+++ openssh-4.2p1-pamexpire/auth2.c     2005-09-22 15:18:31.000000000 +0530
>@@ -210,6 +210,7 @@
> userauth_finish(Authctxt *authctxt, int authenticated, char *method)
> {
>        char *methods;
>+       int ret;
>
>        if (!authctxt->valid && authenticated)
>                fatal("INTERNAL ERROR: authenticated invalid user %s",
>@@ -226,16 +227,20 @@
>
> #ifdef USE_PAM
>        if (options.use_pam && authenticated) {
>-               if (!PRIVSEP(do_pam_account())) {
>+               ret = PRIVSEP(do_pam_account());
>+
>+               if(use_privsep)
>                        /* if PAM returned a message, send it to the user */
>                        if (buffer_len(&loginmsg) > 0) {
>                                buffer_append(&loginmsg, "\0", 1);
>                                userauth_send_banner(buffer_ptr(&loginmsg));
>                                packet_write_wait();
>                        }
>+
>+                       if (ret == 0)
>                        fatal("Access denied for user %s by PAM account "
>                            "configuration", authctxt->user);
>-               }
>+
>        }
> #endif
>

Actions: View | Diff

Attachments on bug 1087: 960 | 961 | 962 | 969 | 972