From owner-freebsd-current@FreeBSD.ORG  Sun Oct  4 16:52:20 2009
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: current@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 314ED1065670;
	Sun,  4 Oct 2009 16:52:20 +0000 (UTC)
	(envelope-from uqs@spoerlein.net)
Received: from acme.spoerlein.net (cl-43.dus-01.de.sixxs.net
	[IPv6:2a01:198:200:2a::2])
	by mx1.freebsd.org (Postfix) with ESMTP id BFA988FC12;
	Sun,  4 Oct 2009 16:52:19 +0000 (UTC)
Received: from acme.spoerlein.net (localhost.spoerlein.net [IPv6:::1])
	by acme.spoerlein.net (8.14.3/8.14.3) with ESMTP id n94GqIh2075909
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Sun, 4 Oct 2009 18:52:18 +0200 (CEST)
	(envelope-from uqs@spoerlein.net)
Received: (from uqs@localhost)
	by acme.spoerlein.net (8.14.3/8.14.3/Submit) id n94GqIpX075908;
	Sun, 4 Oct 2009 18:52:18 +0200 (CEST)
	(envelope-from uqs@spoerlein.net)
Date: Sun, 4 Oct 2009 18:52:18 +0200
From: Ulrich =?utf-8?B?U3DDtnJsZWlu?= <uqs@spoerlein.net>
To: Dag-Erling Smorgrav <des@freebsd.org>, current@freebsd.org
Message-ID: <20091004165217.GS69612@acme.spoerlein.net>
Mail-Followup-To: Dag-Erling Smorgrav <des@freebsd.org>,
	current@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: 
Subject: Update to OpenSSH 5.3p1 broke pam_ssh.so ?
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Oct 2009 16:52:20 -0000

Hi Dag-Erling,

is it possible, that the recent update causes my -CURRENT box to no
longer allow for pam_ssh.so references in /etc/pam.d/{login,sshd}?

I usually use

auth            sufficient      pam_ssh.so      no_warn try_first_pass
session         optional        pam_ssh.so      want_agent

which results in the login aborting/breaking with strange pam_ssh
errors. Could someone try this, not sure if I messed something up at my
end, though the config has not changed in years.

Regards,
Uli