Package: libpam-ssh
Version: 2.3+ds-5
Severity: important
X-Debbugs-Cc: deb...@akurth.de

Dear maintainer,

after upgrading from 2.3+ds-3 to 2.3+ds-5 the default profile changed
to "ssh-pwd", which added the following line at the bottom of my
/etc/pam.d/common-auth:

  [success=0 default=ignore]    pam_ssh.so use_first_pass

This leads to the following error:

  login[1089]: PAM pam_parse: expecting non-zero; [... default=ignore]

which in turn prohibits any login.

The former default profile "ssh" added the line:

  optional pam_ssh.so use_first_pass

Booting into rescue and changing the directive to "optional" fixed the
problem, as expected.

Cheers, Andreas.


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.0-2-amd64 (SMP w/12 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libpam-ssh depends on:
ii  libc6           2.33-2
ii  libpam-runtime  1.4.0-11
ii  libpam0g        1.4.0-11
ii  libssl1.1       1.1.1m-1

Versions of packages libpam-ssh recommends:
ii  libpam-tmpdir                0.09+b2
ii  openssh-client [ssh-client]  1:8.7p1-4

libpam-ssh suggests no packages.

-- no debconf information

Reply via email to