[Bug 107154] [pam] pam.d/sshd pam_ssh.so doesn't start ssh-agent

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=107154

Dag-Erling Smørgrav <des at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|In Progress                 |Closed
         Resolution|---                         |Rejected
                 CC|                            |des at FreeBSD.org

--- Comment #1 from Dag-Erling Smørgrav <des at FreeBSD.org> ---
This is specific to sshd.  It runs pam_open_session(3) in a different process
than pam_authenticate(3), so the SSH key that pam_ssh(8) loaded and decrypted
while executing the latter is not available when executing the former.  This is
a
fundamental flaw in (depending on who you ask) PAM, OpenSSH, or the way PAM is
integrated into OpenSSH.

-- 
You are receiving this mail because:
You are the assignee for the bug.