Package: libpam-ssh
Version: 1.91.0-9.1
Severity: important
Tags: patch

libpam-ssh's config file /etc/pam.d/pam-ssh-auth is configured as "auth
sufficient". auth sufficient seems to remove the auth token which is
required by libpam-mount in order to mount encrypted or password
protected partitions.

patch:
change /etc/pam.d/pam-ssh-auth from
    auth sufficient pam_ssh.so try_first_pass
keyfiles=id_dsa,id_rsa,identity,id_dsa1,id_dsa2,id_dsa3
to
    auth optional pam_ssh.so try_first_pass
keyfiles=id_dsa,id_rsa,identity,id_dsa1,id_dsa2,id_dsa3

After this little change I'm able to mount my encrypted home drive and
use libpam-ssh. As far as I understand PAM making libpam_ssh sufficient
was a bad choice in first place. It's an optional extension. :]

Greetings
Christian

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-1-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages libpam-ssh depends on:
ii  libc6                         2.3.6-7    GNU C Library: Shared libraries
ii  libpam0g                      0.79-3.1   Pluggable Authentication
Modules l
ii  libssl0.9.8                   0.9.8a-8   SSL shared libraries

Versions of packages libpam-ssh recommends:
ii  ssh                           1:4.2p1-8  Secure shell client and
server (tr

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to