Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 6 May 2001 14:40:07 +0200 (CEST)
From:      stolz@i2.informatik.rwth-aachen.de (Volker Stolz)
To:        FreeBSD-gnats-submit@freebsd.org
Subject:   bin/27153: login(1) doesn´t call pam_open_session
Message-ID:  <200105061240.f46Ce7119059@monster.ikea.net>

next in thread | raw e-mail | index | archive | help

>Number:         27153
>Category:       bin
>Synopsis:       session settings in pam.conf are ignored for login(1)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 06 05:40:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Volker Stolz
>Release:        FreeBSD 4.3-STABLE i386
>Organization:
>Environment:
System: FreeBSD monster.ikea.net 4.3-STABLE FreeBSD 4.3-STABLE #0: Sun May 6 11:38:07 CEST 2001 root@monster.ikea.net:/opt/src/sys/compile/MONOMO i386


>Description:
login(1) will not call pam_open_session() and thus all entries regarding the
session-layer of PAM are ignored. This includes pam_ssh which would set up
an ssh-agent-environment.

>How-To-Repeat:
Install /usr/ports/security/pam_ssh, I didn´t get OpenSSH´s pam_ssh to work.
Modify /etc/pam.conf to include
  login   session required        pam_ssh.so
and log in: You will get no PAM session layer.

>Fix:
A simple fix would be to simply call pam_open_session(). However, this will
trigger another bug regarding login/pam_getenvlist/pam_end. Please check
for a subsequent PR.

>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105061240.f46Ce7119059>