https://bugzilla.novell.com/show_bug.cgi?id=730851
https://bugzilla.novell.com/show_bug.cgi?id=730851#c13
--- Comment #13 from Vitezslav Cizek
The question is, for what is pam_ssh good for?
Is it really an authentication module (I think not), than it can be "sufficient" too.
A lot of people use it for single sign-on like this.
It maybe that the configuration with pam_ssh is not correct. But we cannot put it after the real authentication modules, because they are sufficient.
So I guess we can say it's a bug in pam-config (this configuration was created with pam-config --add --ssh), which adds pam_ssh as optional to both common-auth and common-session. For auth stack, it should be either sufficient or not there at all. Anyway, there's nothing to be fixed on pam_ssh side here. It's more a configuration issue. Michael, unless you want to do something with pam-config about this, I'll close this. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.