From owner-cvs-all  Thu Oct 12  3:13:33 2000
Delivered-To: cvs-all@freebsd.org
Received: from gvr.gvr.org (gvr.gvr.org [194.151.74.97])
	by hub.freebsd.org (Postfix) with ESMTP
	id 38B3437B502; Thu, 12 Oct 2000 03:13:30 -0700 (PDT)
Received: by gvr.gvr.org (Postfix, from userid 657)
	id BB1DE5806; Thu, 12 Oct 2000 12:13:28 +0200 (CEST)
Date: Thu, 12 Oct 2000 12:13:28 +0200
From: Guido van Rooij <guido@gvr.org>
To: Ruslan Ermilov <ru@FreeBSD.org>
Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/etc pam.conf src/libexec/rlogind Makefile rlogind.c auth_pam.c src/libexec/rshd Makefile rshd.c
Message-ID: <20001012121328.A8155@gvr.gvr.org>
References: <200010120718.AAA68374@freefall.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200010120718.AAA68374@freefall.freebsd.org>; from ru@FreeBSD.org on Thu, Oct 12, 2000 at 12:18:21AM -0700
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Thu, Oct 12, 2000 at 12:18:21AM -0700, Ruslan Ermilov wrote:
> ru          2000/10/12 00:18:21 PDT
> 
>   Modified files:
>     etc                  pam.conf 
>     libexec/rlogind      Makefile rlogind.c 
>     libexec/rshd         Makefile rshd.c 
>   Removed files:
>     libexec/rlogind      auth_pam.c 
>   Log:
>   Removed broken PAM support from rshd(8) and rlogind(8).  rshd does
>   not allocate a pty(4) so it is not suitable at all for interactive
>   PAM modules.  rlogind calls login(1) which is already PAM enabled.

It as even more broken: the skey.access file checks were broken because
it as verfied not against the host the user was coming in from but against
the local hostname.

-Guido


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message