Package: libpam-ssh Version: 2.3+ds-5 Severity: important X-Debbugs-Cc: deb...@akurth.de
Dear maintainer, after upgrading from 2.3+ds-3 to 2.3+ds-5 the default profile changed to "ssh-pwd", which added the following line at the bottom of my /etc/pam.d/common-auth: [success=0 default=ignore] pam_ssh.so use_first_pass This leads to the following error: login[1089]: PAM pam_parse: expecting non-zero; [... default=ignore] which in turn prohibits any login. The former default profile "ssh" added the line: optional pam_ssh.so use_first_pass Booting into rescue and changing the directive to "optional" fixed the problem, as expected. Cheers, Andreas. -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 5.15.0-2-amd64 (SMP w/12 CPU threads) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libpam-ssh depends on: ii libc6 2.33-2 ii libpam-runtime 1.4.0-11 ii libpam0g 1.4.0-11 ii libssl1.1 1.1.1m-1 Versions of packages libpam-ssh recommends: ii libpam-tmpdir 0.09+b2 ii openssh-client [ssh-client] 1:8.7p1-4 libpam-ssh suggests no packages. -- no debconf information