Re: Bug#156257: ITP: libpam-ssh -- SSH key authentication and single sign-on via PAM

2002-08-12 Thread Brian May
On Sun, Aug 11, 2002 at 06:59:29AM +0200, Russell Coker wrote: Normally to change a user's password you have to be root or to know the old password. This prevents someone from completely taking over your account if you leave your terminal logged in or get tricked into running a hostile

Re: Bug#156257: ITP: libpam-ssh -- SSH key authentication and single sign-on via PAM

2002-08-12 Thread Carlos Laviola
On Mon, Aug 12, 2002 at 04:15:15PM +1000, Brian May wrote: (irrelevant side note: do you need to enter your old passphrase before changing it?) -p Requests changing the passphrase of a private key file instead of creating a new private key. The program will

Re: Bug#156257: ITP: libpam-ssh -- SSH key authentication and single sign-on via PAM

2002-08-12 Thread Peter Palfrader
On Mon, 12 Aug 2002, Brian May wrote: (irrelevant side note: do you need to enter your old passphrase before changing it?) The Passphrase actually encrypts your key, so you of course need to supply it to change or reencrypt the key with a different passphrase.

Re: Bug#156257: ITP: libpam-ssh -- SSH key authentication and single sign-on via PAM

2002-08-11 Thread Roderick Schertler
On Sun, 11 Aug 2002 06:59:29 +0200, Russell Coker [EMAIL PROTECTED] said: With such a PAM module installed anyone who can write to your home directory can change your password. The module provides only PAM auth and session components, so they can't literally change your password. Yes, if they