blob: 472868ea1e7a27e1626423580c56c27f1e13c337 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Installer setting sshd UsePAM to no
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Installer%20setting%20sshd%20UsePAM%20to%20no&In-Reply-To=%3C20120515164710.GO21938%40mars-attacks.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="015685.html">
<LINK REL="Next" HREF="015686.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Installer setting sshd UsePAM to no</H1>
<B>nicolas vigier</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Installer%20setting%20sshd%20UsePAM%20to%20no&In-Reply-To=%3C20120515164710.GO21938%40mars-attacks.org%3E"
TITLE="[Mageia-dev] Installer setting sshd UsePAM to no">boklm at mars-attacks.org
</A><BR>
<I>Tue May 15 18:47:10 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="015685.html">[Mageia-dev] [soft-commits] [4522] - fix updates installation.
</A></li>
<LI>Next message: <A HREF="015686.html">[Mageia-dev] Installer setting sshd UsePAM to no
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#15684">[ date ]</a>
<a href="thread.html#15684">[ thread ]</a>
<a href="subject.html#15684">[ subject ]</a>
<a href="author.html#15684">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Hello,
As seen in previous thread, it is recommended to have UsePAM set to yes
in sshd configuration. This is the default value in the config file
provided by the openssh-server package. However, it seems the
"authentication" part of the installer or drakauth sets UsePAM to no
when local authentication is selected :
<A HREF="http://svnweb.mageia.org/soft/drakx/trunk/perl-install/authentication.pm?revision=3714&view=markup#l328">http://svnweb.mageia.org/soft/drakx/trunk/perl-install/authentication.pm?revision=3714&view=markup#l328</A>
So most people will have UsePAM set to no.
I propose that the installer stop changing the UsePAM option, with
the following patch.
What do you think ?
Index: perl-install/authentication.pm
===================================================================
--- perl-install/authentication.pm (revision 4522)
+++ perl-install/authentication.pm (working copy)
@@ -325,7 +325,6 @@
my $pam_modules = $kind2pam_kind{$kind} or log::l("kind2pam_kind
does not know $kind");
$pam_modules ||= [];
- sshd_config_UsePAM(@$pam_modules > 0);
set_pam_authentication($pam_modules, $authentication->{ccreds});
my $nsswitch = $kind2nsswitch{$kind} or log::l("kind2nsswitch does
not know $kind");
@@ -781,18 +780,6 @@
}
-sub sshd_config_UsePAM {
- my ($UsePAM) = @_;
- my $sshd = "$::prefix/etc/ssh/sshd_config";
- -e $sshd or return;
-
- my $val = "UsePAM " . bool2yesno($UsePAM);
- substInFile {
- $val = '' if s/^#?UsePAM.*/$val/;
- $_ .= "$val\n" if eof && $val;
- } $sshd;
-}
-
sub query_srv_names {
my ($domain) = @_;
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="015685.html">[Mageia-dev] [soft-commits] [4522] - fix updates installation.
</A></li>
<LI>Next message: <A HREF="015686.html">[Mageia-dev] Installer setting sshd UsePAM to no
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#15684">[ date ]</a>
<a href="thread.html#15684">[ thread ]</a>
<a href="subject.html#15684">[ subject ]</a>
<a href="author.html#15684">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
