https://bugzilla.novell.com/show_bug.cgi?id=438292 Summary: openssh calls pam functions in the wrong order on logout Product: openSUSE 11.1 Version: Beta 3 Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Network AssignedTo: anicka@novell.com ReportedBy: anschneider@novell.com QAContact: qa@suse.de Found By: --- Created an attachment (id=247541) --> (https://bugzilla.novell.com/attachment.cgi?id=247541) openssh pam fix for calling functions in the right order on logout openssh calls the pam functions on logout in the wrong order. pam_setcred with the DELETE_CRED flag is called before pam_close_session is called. This means that e.g. a kerberos aware module can't use the kerberos credentials cache to close it's session, cause the tickets are already gone. pam_setcred with DELETE_CRED should be called after pam_close_session. See attached patch. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.