Date: Thu, 17 Dec 2015 20:04:41 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 66095] [pam] template_user is broken in pam_radius Message-ID: <bug-66095-8-rBXuxgSDQV@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-66095-8@https.bugs.freebsd.org/bugzilla/> References: <bug-66095-8@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=66095 Dag-Erling Smørgrav <des@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |des@FreeBSD.org Resolution|FIXED |Rejected --- Comment #6 from Dag-Erling Smørgrav <des@FreeBSD.org> --- The problem is that OpenSSH checks whether the user exists before attempting authentication. Moreover, the OpenSSH developers consider this functionality a security liability and have intentionally removed it from their code (see https://blog.des.no/2015/08/openssh-pam-and-user-names/). Therefore, we will not fix this. -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-66095-8-rBXuxgSDQV>