On Tue, Sep 03, 2013 at 04:16:06PM +0200, Dag-Erling Sm??rgrav wrote: > Lev Serebryakov <l...@freebsd.org> writes: > > "Dag-Erling Sm??rgrav" <d...@des.no> writes: > > > Actually, sshd already does most of this by farming PAM out to a > > > child process. > > And, IMHO, proper way to fix this bug is to fix it here, as "most of > > things" is already done. > > Feel free to submit patches.
Now I found next strange behaviour: for account with not found login class sshd refuse GSSAPIAuthentication. Telnet don't do this strange restriction. (I use login class 'me' in Kerberos/NIS setup). _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"