Re: gss userauth

[Markus Friedl <markus%openbsd.org@localhost>]

On Tue, Sep 02, 2003 at 12:24:58PM -0700, Nicolas Williams wrote:
> Partial userauth is useful for and needed to force the use of
> keyboard-interactive when you want users to change their passwords -
> that way users can't bypass password aging by using pubkey, hostbased or
> gss userauth.

yes, partial userauth is useful, and i had it working similar to
what you suggest, but it never went into an openssh release.  the
question is not whether partial user authentication is good or bad
or easy to implement.  to me, partial authentication is inapproriate
in this gss/mic context.