Package: libpam-ssh Version: 1.91.0-9 Severity: important Basically, it does not work. ;)
If "@include common-auth" is above "@include pam-ssh-auth", as the README.Debian tells me to do, GDM just barks at me that the password is wrong and seems to ignore pam-ssh-auth (even the debugging output does not show anything related to pam-ssh-auth AFAIK). If "@include common-auth" is below the line with "@include pam-ssh-auth", I do get an "enter ssh password" in GDM, but it's not really "single sign-on" for other users who don't have any ssh keys. I suppose your example in README.Debian implies some kind of fall-through functionality to common-auth, but my (frequently updated) Debian unstable system seems to ignore pam-ssh-auth completely after common-auth. Either it works with a fall-through in common-auth; pam-ssh-auth skips (itself) when the user has no ssh keys at all; or something is rather broken in this module. Please enlighten me: how did you get it working with your example? PS: In README.Debian, don't you mean 'id_dsa' instead of 'is_dsa'? -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.12.5 Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages libpam-ssh depends on: ii libc6 2.3.5-7 GNU C Library: Shared libraries an ii libpam0g 0.79-3 Pluggable Authentication Modules l ii libssl0.9.7 0.9.7g-5 SSL shared libraries Versions of packages libpam-ssh recommends: ii ssh 1:4.2p1-5 Secure shell client and server (tr -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
