tree 97052332089b01018034206d1dcd683c4177f787
parent 65c6c6b567ab5ab12945a5ad8e0ab3a8c26119cc
author Darren Tucker <dtucker@zip.com.au> 1468798405 +1000
committer Darren Tucker <dtucker@zip.com.au> 1468798405 +1000

Handle PAM_MAXTRIES from modules.

bz#2249: handle the case where PAM returns PAM_MAXTRIES by ceasing to offer
password and keyboard-interative authentication methods.  Should prevent
"sshd ignoring max retries" warnings in the log.  ok djm@

It probably won't trigger with keyboard-interactive in the default
configuration because the retry counter is stored in module-private
storage which goes away with the sshd PAM process (see bz#688).  On the
other hand, those cases probably won't log a warning either.