- (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)
diff --git a/ChangeLog b/ChangeLog
index d71072f..48ef2d2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+20020508
+ - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)
+
20020507
- (tim) [openbsd-compat/bsd-arc4random.c] fix logic on when seed_rng() is
called. Report by Chris Maxwell <maxwell@cs.dal.ca>
@@ -544,4 +547,4 @@
- (stevesk) entropy.c: typo in debug message
- (djm) ssh-keygen -i needs seeded RNG; report from markus@
-$Id: ChangeLog,v 1.2098 2002/05/08 23:04:14 tim Exp $
+$Id: ChangeLog,v 1.2099 2002/05/09 05:59:13 djm Exp $
diff --git a/auth2.c b/auth2.c
index 4c18d23..61fd0a7 100644
--- a/auth2.c
+++ b/auth2.c
@@ -121,6 +121,8 @@
options.kbd_interactive_authentication = 1;
if (options.pam_authentication_via_kbd_int)
options.kbd_interactive_authentication = 1;
+ if (use_privsep)
+ options.pam_authentication_via_kbd_int = 0;
dispatch_init(&dispatch_protocol_error);
dispatch_set(SSH2_MSG_SERVICE_REQUEST, &input_service_request);