New subject: [Bug 438292] openssh calls pam functions in the wrong order on logout

23 Oct 2008

      https://bugzilla.novell.com/show_bug.cgi?id=438292

           Summary: openssh calls pam functions in the wrong order on logout
           Product: openSUSE 11.1
           Version: Beta 3
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Critical
          Priority: P5 - None
         Component: Network
        AssignedTo: anicka@novell.com
        ReportedBy: anschneider@novell.com
         QAContact: qa@suse.de
          Found By: ---

Created an attachment (id=247541)
 --> (https://bugzilla.novell.com/attachment.cgi?id=247541)
openssh pam fix for calling functions in the right order on logout

openssh calls the pam functions on logout in the wrong order.

pam_setcred with the DELETE_CRED flag is called before pam_close_session is
called.

This means that e.g. a kerberos aware module can't use the kerberos credentials
cache to close it's session, cause the tickets are already gone.

pam_setcred with DELETE_CRED should be called after pam_close_session.

See attached patch.

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug 438292] New: openssh calls pam functions in the wrong order on logout

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

tags

participants (1)