From owner-cvs-all Tue Aug 1 7: 6:53 2000 Delivered-To: cvs-all@freebsd.org Received: from axl.ops.uunet.co.za (axl.ops.uunet.co.za [196.31.2.163]) by hub.freebsd.org (Postfix) with ESMTP id D42E937B6E0; Tue, 1 Aug 2000 07:06:41 -0700 (PDT) (envelope-from sheldonh@axl.ops.uunet.co.za) Received: from sheldonh (helo=axl.ops.uunet.co.za) by axl.ops.uunet.co.za with local-esmtp (Exim 3.16 #1) id 13Jcgo-0004ag-00; Tue, 01 Aug 2000 16:06:38 +0200 From: Sheldon Hearn To: cvs-committers@FreeBSD.ORG Cc: cvs-all@FreeBSD.ORG Subject: Re: cvs commit: src/libexec/ftpd ftpd.c In-reply-to: Your message of "Tue, 01 Aug 2000 06:58:57 MST." <200008011358.GAA50514@freefall.freebsd.org> Date: Tue, 01 Aug 2000 16:06:38 +0200 Message-ID: <17649.965138798@axl.ops.uunet.co.za> Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 01 Aug 2000 06:58:57 MST, Sheldon Hearn wrote: > Honour skey.access(5) by allowing UNIX passwords when skeyaccess(3) > has set pwok to a non-zero value. > > Previously, the fact that skey.access(5) allowed UNIX passwords for > this connection attempt was ignored, even in the NOPAM case. > > This only addresses the NOPAM case; when libpam is used, the problem > will persist. > > PR: 20333 I'd really appreciate it if someone else with a bit of PAM clue could look into this on PAM side. The PR contains a more detailed description of the problem. Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message