From 3a38c5a856073672228b8033599e96fe749cb116 Mon Sep 17 00:00:00 2001 From: Darren Tucker Date: Sat, 5 Nov 2005 16:28:35 +1100 Subject: - (dtucker) [README.platform] Add PAM section. --- README.platform | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'README.platform') diff --git a/README.platform b/README.platform index af551de4..4c18a327 100644 --- a/README.platform +++ b/README.platform @@ -45,4 +45,14 @@ number is already in use on your system, you may change it at build time by configure'ing --with-cflags=-DAUE_openssh=32801 then rebuilding. -$Id: README.platform,v 1.5 2005/02/20 10:01:49 dtucker Exp $ +Platforms using PAM +------------------- +As of OpenSSH 4.3p1, sshd will no longer check /etc/nologin itself when +PAM is enabled. To maintain existing behaviour, pam_nologin should be +added to sshd's session stack which will prevent users from starting shell +sessions. Alternatively, pam_nologin can be added to either the auth or +account stacks which will prevent authentication entirely, but will still +return the output from pam_nologin to the client. + + +$Id: README.platform,v 1.6 2005/11/05 05:28:35 dtucker Exp $ -- cgit v1.2.3