Russ Allbery <[EMAIL PROTECTED]> writes: > It would be very nice if openssh-server could be modified to not fork > that separate [pam] subprocess and instead do the PAM authentication > calls in the parent process. I expect this will break various other PAM > modules that rely on the separation between pam_authenticate and > pam_setcred.
Er, I suspect that the *current behavior* will break various other PAM modules that rely on the separation between pam_authenticate and pam_setcred. Not forking the separate process would be the fix. -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]