rcolebaugh / rpms / openssh

Forked from rpms/openssh 2 years ago
Clone
f32b84
diff -up openssh-8.6p1/sshd.c.log-usepam-no openssh-8.6p1/sshd.c
f32b84
--- openssh-8.6p1/sshd.c.log-usepam-no	2021-04-19 14:00:45.099735129 +0200
f32b84
+++ openssh-8.6p1/sshd.c	2021-04-19 14:03:21.140920974 +0200
f32b84
@@ -1749,6 +1749,10 @@ main(int ac, char **av)
Petr Lautrbach 5bd5aa
 	parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
03150f
 	    cfg, &includes, NULL, rexeced_flag);
Petr Lautrbach 5bd5aa
 
Petr Lautrbach 5bd5aa
+	/* 'UsePAM no' is not supported in Fedora */
Petr Lautrbach 5bd5aa
+	if (! options.use_pam)
Petr Lautrbach 5bd5aa
+		logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
Petr Lautrbach 5bd5aa
+
f32b84
 #ifdef WITH_OPENSSL
f32b84
 	if (options.moduli_file != NULL)
f32b84
 		dh_set_moduli_file(options.moduli_file);
f32b84
diff -up openssh-8.6p1/sshd_config.log-usepam-no openssh-8.6p1/sshd_config
f32b84
--- openssh-8.6p1/sshd_config.log-usepam-no	2021-04-19 14:00:45.098735121 +0200
f32b84
+++ openssh-8.6p1/sshd_config	2021-04-19 14:00:45.099735129 +0200
f32b84
@@ -87,6 +87,8 @@ AuthorizedKeysFile	.ssh/authorized_keys
Petr Lautrbach 5bd5aa
 # If you just want the PAM account and session checks to run without
Petr Lautrbach 5bd5aa
 # PAM authentication, then enable this but set PasswordAuthentication
8f4d19
 # and KbdInteractiveAuthentication to 'no'.
Petr Lautrbach 5bd5aa
+# WARNING: 'UsePAM no' is not supported in Fedora and may cause several
Petr Lautrbach 5bd5aa
+# problems.
Jakub Jelen 51f5c1
 #UsePAM no
Petr Lautrbach 5bd5aa
 
Petr Lautrbach 94c6f8
 #AllowAgentForwarding yes