Blame openssh-7.8p1-UsePAM-warning.patch
|
Dmitry Belyavskiy |
f32b84 |
diff -up openssh-8.6p1/sshd.c.log-usepam-no openssh-8.6p1/sshd.c
|
|
Dmitry Belyavskiy |
f32b84 |
--- openssh-8.6p1/sshd.c.log-usepam-no 2021-04-19 14:00:45.099735129 +0200
|
|
Dmitry Belyavskiy |
f32b84 |
+++ openssh-8.6p1/sshd.c 2021-04-19 14:03:21.140920974 +0200
|
|
Dmitry Belyavskiy |
f32b84 |
@@ -1749,6 +1749,10 @@ main(int ac, char **av)
|
|
Petr Lautrbach |
5bd5aa |
parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
|
|
Dmitry Belyavskiy |
03150f |
cfg, &includes, NULL, rexeced_flag);
|
|
Petr Lautrbach |
5bd5aa |
|
|
Petr Lautrbach |
5bd5aa |
+ /* 'UsePAM no' is not supported in Fedora */
|
|
Petr Lautrbach |
5bd5aa |
+ if (! options.use_pam)
|
|
Petr Lautrbach |
5bd5aa |
+ logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
|
|
Petr Lautrbach |
5bd5aa |
+
|
|
Dmitry Belyavskiy |
f32b84 |
#ifdef WITH_OPENSSL
|
|
Dmitry Belyavskiy |
f32b84 |
if (options.moduli_file != NULL)
|
|
Dmitry Belyavskiy |
f32b84 |
dh_set_moduli_file(options.moduli_file);
|
|
Dmitry Belyavskiy |
f32b84 |
diff -up openssh-8.6p1/sshd_config.log-usepam-no openssh-8.6p1/sshd_config
|
|
Dmitry Belyavskiy |
f32b84 |
--- openssh-8.6p1/sshd_config.log-usepam-no 2021-04-19 14:00:45.098735121 +0200
|
|
Dmitry Belyavskiy |
f32b84 |
+++ openssh-8.6p1/sshd_config 2021-04-19 14:00:45.099735129 +0200
|
|
Dmitry Belyavskiy |
f32b84 |
@@ -87,6 +87,8 @@ AuthorizedKeysFile .ssh/authorized_keys
|
|
Petr Lautrbach |
5bd5aa |
# If you just want the PAM account and session checks to run without
|
|
Petr Lautrbach |
5bd5aa |
# PAM authentication, then enable this but set PasswordAuthentication
|
|
Dmitry Belyavskiy |
8f4d19 |
# and KbdInteractiveAuthentication to 'no'.
|
|
Petr Lautrbach |
5bd5aa |
+# WARNING: 'UsePAM no' is not supported in Fedora and may cause several
|
|
Petr Lautrbach |
5bd5aa |
+# problems.
|
|
Jakub Jelen |
51f5c1 |
#UsePAM no
|
|
Petr Lautrbach |
5bd5aa |
|
|
Petr Lautrbach |
94c6f8 |
#AllowAgentForwarding yes
|