From owner-freebsd-bugs  Sat Aug 18  4:50:16 2001
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 62B0E37B40B
	for <freebsd-bugs@hub.freebsd.org>; Sat, 18 Aug 2001 04:50:13 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f7IBoDc53196;
	Sat, 18 Aug 2001 04:50:13 -0700 (PDT)
	(envelope-from gnats)
Received: from mailout00.sul.t-online.de (mailout00.sul.t-online.com [194.25.134.16])
	by hub.freebsd.org (Postfix) with ESMTP id 6A66E37B40F
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 18 Aug 2001 04:41:08 -0700 (PDT)
	(envelope-from stolz@i2.informatik.rwth-aachen.de)
Received: from fwd06.sul.t-online.de 
	by mailout00.sul.t-online.de with smtp 
	id 15Y4TT-0002Yq-02; Sat, 18 Aug 2001 13:41:07 +0200
Received: from theater.dyndns.org (320068889749-0001@[217.224.154.121]) by fmrl06.sul.t-online.com
	with esmtp id 15Y4TS-1xvGSmC; Sat, 18 Aug 2001 13:41:06 +0200
Received: from monster.ikea.net (monster.ikea.net [192.168.2.3])
	by theater.dyndns.org (8.11.4/8.11.3) with ESMTP id f7IBfeh15454
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 18 Aug 2001 13:41:41 +0200 (CEST)
	(envelope-from stolz@i2.informatik.rwth-aachen.de)
Received: (from vs@localhost)
	by monster.ikea.net (8.11.5/8.11.1) id f7IBf4X59235;
	Sat, 18 Aug 2001 13:41:04 +0200 (CEST)
	(envelope-from vs)
Message-Id: <200108181141.f7IBf4X59235@monster.ikea.net>
Date: Sat, 18 Aug 2001 13:41:04 +0200 (CEST)
From: Volker Stolz <vs@foldr.org>
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.113
Subject: bin/29846: SRA login via telnet ignores PAM
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org


>Number:         29846
>Category:       bin
>Synopsis:       SRA login via telnet ignores PAM
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Aug 18 04:50:02 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Volker Stolz
>Release:        FreeBSD 4.4-PRERELEASE i386
>Organization:
Lehrstuhl für Informatik II
>Environment:
System: FreeBSD monster.ikea.net 4.4-PRERELEASE FreeBSD 4.4-PRERELEASE #27: Sun Aug 12 16:42:41 CEST 2001 vs@monster.ikea.net:/opt/obj/opt/src/sys/MONSTER i386


>Description:
While trying to build some more PAM modules, I noticed that when telnetting to localhost
the PAM settings in /etc/pam.conf for "login" are ignored. Only when I disable SRA via "telnet -X sra"
PAM is used.
>How-To-Repeat:
Configure PAM for login so that it does something *visible*, e.g. via /usr/ports/security/pam_ssh -
you should see some SSH-related variables in the environment when logging in on the console.
Now telnet localhost and check: the pam module hasn´t been invoked!
Try with -X sra: voila, here they are!
>Fix:
Not yet, my eyes still hurt from looking at the telnetd sources.
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message