ports/114825: pam module security/pam_abl not working

[Jamie Landeg Jones]

The following reply was made to PR ports/114825; it has been noted by GNATS.

From: Jamie Landeg Jones <jamie at bishopston.net>
To: silver at ultrasoft.ee, jamie at bishopston.net, carlson39 at llnl.gov,
        bug-followup at FreeBSD.org, admin at lissyara.su
Cc: try_first_pass at catflap.bishopston.net, no_warn at catflap.bishopston.net,
        pam_krb5.so at catflap.bishopston.net, sufficient at catflap.bishopston.net,
        #auth at catflap.bishopston.net, jamie at bishopston.net
Subject: Re: ports/114825: pam module security/pam_abl not working
Date: Sun, 30 Jan 2011 17:57:52 +0000

 As mentioned by the original submitter, but confused by an incorrect patch,
 repeating the auth line in /etc/pam.d/sshd 'fixes' the problem!
 
 i.e. this snippet:
 
 #auth           sufficient      pam_krb5.so             no_warn try_first_pass
 #auth           sufficient      pam_ssh.so              no_warn try_first_pass
 auth            required        /usr/local/lib/pam_abl.so config=/usr/local/etc/pam_abl.conf
 auth            required        /usr/local/lib/pam_abl.so config=/usr/local/etc/pam_abl.conf
 auth            required        pam_unix.so             no_warn try_first_pass
 
 May this throw some light on the issue?
 
 As I said in the PR, the exact same config on both my main host and the jail, but it's only
 the jail that has the issue
 
 Cheers,
 Jamie