[SSSD] [PATCH] PAM: Remove authtok from PAM stack with OTP

Jakub Hrozek jhrozek at redhat.com
Tue Oct 21 18:00:24 UTC 2014


On Tue, Oct 21, 2014 at 01:22:55PM -0400, Nathaniel McCallum wrote:
> On Tue, 2014-10-21 at 09:59 +0200, Jakub Hrozek wrote:
> > On Tue, Oct 21, 2014 at 12:44:00AM +0200, Lukas Slebodnik wrote:
> > > ehlo,
> > > 
> > > We remove the password from the PAM stack when OTP is used to make sure
> > > that other pam modules (pam-gnome-keyring, pam_mount) cannot use it anymore
> > > and have to request a password on their own.
> > > 
> > > Resolves: https://fedorahosted.org/sssd/ticket/2287
> > > 
> > > Simple patch is attached.
> > > 
> > > LS
> > 
> > Hi Nathaniel,
> > 
> > is this something you can help us test or shall we do the testing
> > ourselves?
> 
> Yes, I will help test. I will probably need a day or two though.
> 
> Nathaniel
> 

No problem and thank you for testing!



More information about the sssd-devel mailing list