Blame openssh-7.2p2-UsePAM-UseLogin-warning.patch
|
Petr Lautrbach |
94c6f8 |
diff --git a/sshd.c b/sshd.c
|
|
Petr Lautrbach |
94c6f8 |
--- a/sshd.c
|
|
Petr Lautrbach |
94c6f8 |
+++ b/sshd.c
|
|
Jakub Jelen |
186bf3 |
@@ -1701,6 +1701,14 @@ main(int ac, char **av)
|
|
Petr Lautrbach |
5bd5aa |
parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
|
|
Petr Lautrbach |
9fe1af |
&cfg, NULL);
|
|
Petr Lautrbach |
5bd5aa |
|
|
Jakub Jelen |
186bf3 |
+ /* 'UseLogin yes' is not supported in Fedora */
|
|
Jakub Jelen |
186bf3 |
+ if (options.use_login)
|
|
Jakub Jelen |
186bf3 |
+ logit("WARNING: 'UseLogin yes' is not supported in Fedora and may cause several problems.");
|
|
Jakub Jelen |
186bf3 |
+
|
|
Petr Lautrbach |
5bd5aa |
+ /* 'UsePAM no' is not supported in Fedora */
|
|
Petr Lautrbach |
5bd5aa |
+ if (! options.use_pam)
|
|
Petr Lautrbach |
5bd5aa |
+ logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
|
|
Petr Lautrbach |
5bd5aa |
+
|
|
Petr Lautrbach |
5bd5aa |
seed_rng();
|
|
Petr Lautrbach |
5bd5aa |
|
|
Petr Lautrbach |
5bd5aa |
/* Fill in default values for those options not explicitly set. */
|
|
Petr Lautrbach |
94c6f8 |
diff --git a/sshd_config b/sshd_config
|
|
Petr Lautrbach |
94c6f8 |
--- a/sshd_config
|
|
Petr Lautrbach |
94c6f8 |
+++ b/sshd_config
|
|
Petr Lautrbach |
94c6f8 |
@@ -101,6 +101,8 @@ GSSAPICleanupCredentials no
|
|
Petr Lautrbach |
5bd5aa |
# If you just want the PAM account and session checks to run without
|
|
Petr Lautrbach |
5bd5aa |
# PAM authentication, then enable this but set PasswordAuthentication
|
|
Petr Lautrbach |
5bd5aa |
# and ChallengeResponseAuthentication to 'no'.
|
|
Petr Lautrbach |
5bd5aa |
+# WARNING: 'UsePAM no' is not supported in Fedora and may cause several
|
|
Petr Lautrbach |
5bd5aa |
+# problems.
|
|
Petr Lautrbach |
5bd5aa |
UsePAM yes
|
|
Petr Lautrbach |
5bd5aa |
|
|
Petr Lautrbach |
94c6f8 |
#AllowAgentForwarding yes
|
|
Jakub Jelen |
186bf3 |
@@ -113,6 +115,8 @@ X11Forwarding yes
|
|
Jakub Jelen |
186bf3 |
#PrintMotd yes
|
|
Jakub Jelen |
186bf3 |
#PrintLastLog yes
|
|
Jakub Jelen |
186bf3 |
#TCPKeepAlive yes
|
|
Jakub Jelen |
186bf3 |
+# WARNING: 'UseLogin yes' is not supported in Fedora and may cause several
|
|
Jakub Jelen |
186bf3 |
+# problems.
|
|
Jakub Jelen |
186bf3 |
#UseLogin no
|
|
Jakub Jelen |
186bf3 |
#UsePrivilegeSeparation sandbox
|
|
Jakub Jelen |
186bf3 |
#PermitUserEnvironment no
|