summaryrefslogtreecommitdiff
path: root/openssh-7.8p1-UsePAM-warning.patch
diff options
context:
space:
mode:
authorCoprDistGit <infra@openeuler.org>2023-10-02 04:02:17 +0000
committerCoprDistGit <infra@openeuler.org>2023-10-02 04:02:17 +0000
commit24b6ed9bc1ef1538b8f3e254b30b1006f5e4d78f (patch)
treee2725d205951345a1c853965086be06d6a6cbf59 /openssh-7.8p1-UsePAM-warning.patch
parentc7ba49a1e66ed27d507eafa4da2b81838a2afa64 (diff)
automatic import of openssh
Diffstat (limited to 'openssh-7.8p1-UsePAM-warning.patch')
-rw-r--r--openssh-7.8p1-UsePAM-warning.patch26
1 files changed, 26 insertions, 0 deletions
diff --git a/openssh-7.8p1-UsePAM-warning.patch b/openssh-7.8p1-UsePAM-warning.patch
new file mode 100644
index 0000000..48d2b32
--- /dev/null
+++ b/openssh-7.8p1-UsePAM-warning.patch
@@ -0,0 +1,26 @@
+diff -up openssh-8.6p1/sshd.c.log-usepam-no openssh-8.6p1/sshd.c
+--- openssh-8.6p1/sshd.c.log-usepam-no 2021-04-19 14:00:45.099735129 +0200
++++ openssh-8.6p1/sshd.c 2021-04-19 14:03:21.140920974 +0200
+@@ -1749,6 +1749,10 @@ main(int ac, char **av)
+ parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
+ cfg, &includes, NULL, rexeced_flag);
+
++ /* 'UsePAM no' is not supported in openEuler */
++ if (! options.use_pam)
++ logit("WARNING: 'UsePAM no' is not supported in openEuler and may cause several problems.");
++
+ #ifdef WITH_OPENSSL
+ if (options.moduli_file != NULL)
+ dh_set_moduli_file(options.moduli_file);
+diff -up openssh-8.6p1/sshd_config.log-usepam-no openssh-8.6p1/sshd_config
+--- openssh-8.6p1/sshd_config.log-usepam-no 2021-04-19 14:00:45.098735121 +0200
++++ openssh-8.6p1/sshd_config 2021-04-19 14:00:45.099735129 +0200
+@@ -87,6 +87,8 @@ AuthorizedKeysFile .ssh/authorized_keys
+ # If you just want the PAM account and session checks to run without
+ # PAM authentication, then enable this but set PasswordAuthentication
+ # and KbdInteractiveAuthentication to 'no'.
++# WARNING: 'UsePAM no' is not supported in openEuler and may cause several
++# problems.
+ #UsePAM no
+
+ #AllowAgentForwarding yes