OpenSSH with privilege separation and pam_mkhomedir

Andrew Bartlett abartlet at samba.org
Wed Aug 7 14:43:42 EST 2002


Andrew Pollock wrote:
> 
> Hi,
> 
> pam_mkhomedir+OpenSSH+privsep is shagged (at least with Debian AFAICT)
> 
> Does anyone "in the know" know if/when it's going to be fixed?

But the OpenSSH lists - or put an entry in their bugzilla.

Personally, I think there is a reason why the privsep concept hasn't
been done before - it's *very* hard to do, particularly in a portable
way, with all the quirks of all the systems...

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net



More information about the linux mailing list