I'd like to arrange for the less-informative "ssh" one to be skipped.
This can be done by adding "skip_if=sshd" to libpam_wtmpdb's options,
and https://build.opensuse.org/projects/Linux-PAM/packages/wtmpdb/files/wtmpdb.spec
shows that openSUSE is configuring it that way (thanks to Chris
Hofstaedtler for pointing that out). Should we do the same in Debian's libpam-wtmpdb package, or is there a way to do it entirely in
openssh-server somehow?
On Fri, Apr 11, 2025 at 01:06:00PM +0100, Colin Watson wrote:
I'd like to arrange for the less-informative "ssh" one to be skipped.
This can be done by adding "skip_if=sshd" to libpam_wtmpdb's options,
and
https://build.opensuse.org/projects/Linux-PAM/packages/wtmpdb/files/wtmpdb.spec
shows that openSUSE is configuring it that way (thanks to Chris
Hofstaedtler for pointing that out). Should we do the same in Debian's
libpam-wtmpdb package, or is there a way to do it entirely in
openssh-server somehow?
The latter would clearly be preferrable but I can't see that the pam
config framework provides the expressivity to do so cleanly so I suppose >skip_if is a reasonable plan and it will have to be up to users of other
ssh servers to override the configuration - I've prepared a readme note
to that effect.
I've tried the combination out. Are you ready to upload a version of >src:openssh with the change?
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 481 |
Nodes: | 16 (3 / 13) |
Uptime: | 17:59:23 |
Calls: | 9,542 |
Calls today: | 2 |
Files: | 13,653 |
Messages: | 6,139,890 |