We're going to fix 'make upgrade' to not require this manual intervention, but it may take a day or two, so anyone using master... beware of this issue.
-Matt On Mon, Jun 17, 2019 at 7:21 AM Rimvydas Jasinskas <[email protected]> wrote: > Hi, > > deprecated OPIE removal from base requires manual intervention > *before* rebooting on updated master, > The "make upgrade" script only warns about detected opie presence and > suggest to manually edit or reinstall default PAM configs (cd > /usr/src/etc/pam.d && make install) on both 5.6-RELEASE and > 5.7-DEVELOPMENT. > Make sure that /etc/pam.d/* configs no longer have hardcoded pam_opie > entries on master. For more information, see > ed5666c1699a23a9ae3c0aca97dabaae71e26431 > > Also OpenSSH was recently updated to 8.0p1. UsePAM option is enabled > by default if sshd(8) is compiled with -DUSE_PAM. > From now on default base sshd(8) configs are installed into > /usr/share/examples/ssh/ together with cert.pem and openssl.cnf in > /usr/share/examples/ssl/ too. > Please check your /etc/ssh/sshd_config for deprecated options. > > RJ >
