From c2c0bdd3e96b3ef66d77fccb85ff4962dc76caf0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Eero=20H=C3=A4kkinen?= Date: Sat, 16 Sep 2023 00:55:08 +0300 Subject: [PATCH] Expose SSH_AUTH_INFO_0 always to PAM auth modules. This changes SSH_AUTH_INFO_0 to be exposed to PAM auth modules also when a password authentication method is in use and not only when a keyboard-interactive authentication method is in use. --- auth-pam.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/auth-pam.c b/auth-pam.c index b49d415e7..e143304e3 100644 --- a/auth-pam.c +++ b/auth-pam.c @@ -1375,6 +1375,8 @@ sshpam_auth_passwd(Authctxt *authctxt, const char *password) fatal("PAM: %s: failed to set PAM_CONV: %s", __func__, pam_strerror(sshpam_handle, sshpam_err)); + expose_authinfo(__func__); + sshpam_err = pam_authenticate(sshpam_handle, flags); sshpam_password = NULL; free(fake);