Re: Using PAM an the SSH Protocol

[sjl%ssh.com@localhost (Sami J. Lehtinen)]

Darren.Moffat%eng.sun.com@localhost (Darren Moffat) writes:

> >keyboard-interactive is capable of fully interacting with PAM.  It was,
> >in fact, designed based on an sshd using PAM.  Is "pam-1%ssh.com@localhost" still
> >in use?  That would be most unfortunate, it breaks one of the things
> >kbdint was meant to solve: client knowledge of the authentication
> >mechanism.
> 
> I believe that pam-1%ssh.com@localhost is still in use.  If some one from SSH 
> Communications is listening can you tells us if you plan to rectify this ?

Yes, the next version will support PAM over keyboard-interactive.

-- 
[sjl%ssh.com@localhost          --  Sami J. Lehtinen  --           sjl%iki.fi@localhost]
[work:+358 20 5007425][gsm:+358 40 864 3001][http://www.iki.fi/~sjl]
[SSH Communications Security Corp               http://www.ssh.com/]