diff options
| author | des <des@FreeBSD.org> | 2003-01-31 11:08:07 +0000 |
|---|---|---|
| committer | des <des@FreeBSD.org> | 2003-01-31 11:08:07 +0000 |
| commit | a428b352906a572b43c9e4c707647f76ddc30f62 (patch) | |
| tree | 837214a91184ba78b0eb5ff15f901bdc7c06bb09 /sys/kern/subr_trap.c | |
| parent | 663bb01de61bcd87a89209286f5aed9043069991 (diff) | |
| download | FreeBSD-src-a428b352906a572b43c9e4c707647f76ddc30f62.zip FreeBSD-src-a428b352906a572b43c9e4c707647f76ddc30f62.tar.gz | |
Fix keyboard-interactive authentication for ssh1. The problem was twofold:
- The PAM kbdint device sometimes doesn't know authentication succeeded
until you re-query it. The ssh1 kbdint code would never re-query the
device, so authentication would always fail. This patch has been
submitted to the OpenSSH developers.
- The monitor code for PAM sometimes forgot to tell the monitor that
authentication had succeeded. This caused the monitor to veto the
privsep child's decision to allow the connection.
These patches have been tested with OpenSSH clients on -STABLE, NetBSD and
Linux, and with ssh.com's ssh1 on Solaris.
Sponsored by: DARPA, NAI Labs
Diffstat (limited to 'sys/kern/subr_trap.c')
0 files changed, 0 insertions, 0 deletions
