summaryrefslogtreecommitdiff
path: root/backport-openssh-7.8p1-UsePAM-warning.patch
diff options
context:
space:
mode:
Diffstat (limited to 'backport-openssh-7.8p1-UsePAM-warning.patch')
-rw-r--r--backport-openssh-7.8p1-UsePAM-warning.patch28
1 files changed, 28 insertions, 0 deletions
diff --git a/backport-openssh-7.8p1-UsePAM-warning.patch b/backport-openssh-7.8p1-UsePAM-warning.patch
new file mode 100644
index 0000000..9b60622
--- /dev/null
+++ b/backport-openssh-7.8p1-UsePAM-warning.patch
@@ -0,0 +1,28 @@
+diff -up openssh-8.6p1/sshd.c.log-usepam-no openssh-8.6p1/sshd.c
+--- openssh-8.6p1/sshd.c.log-usepam-no 2021-04-19 14:00:45.099735129 +0200
++++ openssh-8.6p1/sshd.c 2021-04-19 14:03:21.140920974 +0200
+Reference:https://src.fedoraproject.org/rpms/openssh/blob/rawhide/f/backport-openssh-7.8p1-UsePAM-warning.patch
+@@ -1749,6 +1749,10 @@ main(int ac, char **av)
+ parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
+ cfg, &includes, NULL);
+
++ /* 'UsePAM no' is not supported in Fedora */
++ if (! options.use_pam)
++ logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
++
+ #ifdef WITH_OPENSSL
+ if (options.moduli_file != NULL)
+ dh_set_moduli_file(options.moduli_file);
+diff -up openssh-8.6p1/sshd_config.log-usepam-no openssh-8.6p1/sshd_config
+--- openssh-8.6p1/sshd_config.log-usepam-no 2021-04-19 14:00:45.098735121 +0200
++++ openssh-8.6p1/sshd_config 2021-04-19 14:00:45.099735129 +0200
+Reference:https://src.fedoraproject.org/rpms/openssh/blob/rawhide/f/backport-openssh-7.8p1-UsePAM-warning.patch
+@@ -87,6 +87,8 @@ AuthorizedKeysFile .ssh/authorized_keys
+ # If you just want the PAM account and session checks to run without
+ # PAM authentication, then enable this but set PasswordAuthentication
+ # and KbdInteractiveAuthentication to 'no'.
++# WARNING: 'UsePAM no' is not supported in Fedora and may cause several
++# problems.
+ #UsePAM no
+
+ #AllowAgentForwarding yes