Re: [PATCH] Set KRB5PRINCIPAL in user environment

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On Fri, 2018-03-16 at 19:07 +1030, David Newall wrote:
> > There is no reply about this demand since the firt proposition
> > has  if nobody in dev team cares about it :(
> 
> I'm curious about the first section of the diff, which exports 
> SSH_GSSAPI_DISPLAYNAME to PAM.  Is that useful?  Am I right that the
> PAM 
> environment forms no part of the client session?  Does PAM not work
> for GSS?

Yes, the PAM environment is separate from the environment, where the
new user session is created.

PAM works fine with GSS, but you might have PAM modules, that might use
this variable to do some further decisions while setting user session,
but I do not see if this is used in practice anywhere at this moment.

Regards,
-- 
Jakub Jelen
Software Engineer
Security Technologies
Red Hat, Inc.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev



[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux