https://bugzilla.mindrot.org/show_bug.cgi?id=2876
Bug ID: 2876
Summary: PAM_TEXT_INFO and PAM_ERROR_MSG conversation not
honoured during PAM authentication
Product: Portable OpenSSH
Version: 7.7p1
Hardware: Other
OS: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: PAM support
Assignee: [email protected]
Reporter: [email protected]
I built a PAM module which only responsibility is sending a challenge
to the end-user in the form of a (unique) url. No input is required,
nor appreciated.
openssh however, discards all conversation of type PAM_TEXT_INFO and
PAM_ERROR_MSG until the PAM module returns control. All conversation of
type PAM_PROMPT_ECHO_[ON|OFF] is honoured, but I don't want the user to
need to enter something, not even <enter> before returning the
authentication result.
I know displaying messages of type PAM_ERROR_MSG is frowned upon and
regarded as leaking information, but PAM_TEXT_INFO is there for a
reason. Please reconsider displaying them, without the need for user
interaction.
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
