Bug 12776

Summary: Add PAM hooks to rlogind and rshd
Product: Base System Reporter: dagill <dagill>
Component: miscAssignee: Mark Murray <markm>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description dagill 1999-07-23 16:00:02 UTC 
Attached are patches for rshd and rlogind to add a hook to use
PAM modules to handle user authentication.

The following code (which originally came from login) gives us the
ability to use PAM to deny the user access before attempting to access
their .rhosts file. Without these changes, rsh and rlogin authenticate
the user by their .rhosts file without giving PAM a chance to validate
them.  With these changes, we provide the oportunity to callout to PAM
before any .rhost checking and thus deny user login based on the
policy coded into the PAM module.

Please consider these changes for review and integration into the base
system.

How-To-Repeat: n/a
Comment 1 ru freebsd_committer freebsd_triage 2000-10-11 16:11:39 UTC 
State Changed
From-To: open->closed

A similar (or exactly this) patch has been applied a long time ago.
Comment 2 ru freebsd_committer freebsd_triage 2000-10-11 16:11:39 UTC 
Responsible Changed
From-To: freebsd-bugs->markm

Mark has done that.