GNU bug report logs - #22175
/etc/environment not honored by lshd

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 22175 in the body.
You can then email your comments to 22175 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: bug-guix <at> gnu.org
Cc: lsh-bugs <at> lists.lysator.liu.se, iyzsong <at> member.fsf.org
Subject: /etc/environment not honored by lshd
Date: Tue, 15 Dec 2015 09:02:51 +0100

Hello!

Somehow /etc/environment isn’t honored when logging in via SSH to an
lshd server running on GuixSD, despite the fact that /etc/pam.d/lshd has
this:

--8<---------------cut here---------------start------------->8---
account required pam_unix.so 
auth required pam_unix.so 
password required pam_unix.so sha512 shadow
session required pam_env.so 
session required pam_unix.so 
--8<---------------cut here---------------end--------------->8---

Ludo’.

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: nisse <at> lysator.liu.se (Niels Möller)
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: lsh-bugs <at> lists.lysator.liu.se, iyzsong <at> member.fsf.org, bug-guix <at> gnu.org
Subject: Re: /etc/environment not honored by lshd
Date: Tue, 15 Dec 2015 10:22:47 +0100

ludo <at> gnu.org (Ludovic Courtès) writes:

> Somehow /etc/environment isn’t honored when logging in via SSH to an
> lshd server running on GuixSD, despite the fact that /etc/pam.d/lshd has
> this:

lshd does *not* do the PAM session things (it can use pam for checking
passwords, but only for that). And I'm afraid it's not reasonable to add
support for it in lsh-2.x. Sorry about that.

Old discussion here:
https://lists.debian.org/debian-devel/2000/10/msg01417.html

I have softened a bit since ;-). I think proper PAM support is feature
that fits well in the reorganized lsh-3 userauth, and that I guess lot
of users nned. But not yet implemented there either.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.

Message #11 received at submit <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: nisse <at> lysator.liu.se (Niels Möller)
Cc: lsh-bugs <at> lists.lysator.liu.se, iyzsong <at> member.fsf.org, bug-guix <at> gnu.org
Subject: Re: /etc/environment not honored by lshd
Date: Tue, 15 Dec 2015 22:01:11 +0100

nisse <at> lysator.liu.se (Niels Möller) skribis:

> ludo <at> gnu.org (Ludovic Courtès) writes:
>
>> Somehow /etc/environment isn’t honored when logging in via SSH to an
>> lshd server running on GuixSD, despite the fact that /etc/pam.d/lshd has
>> this:
>
> lshd does *not* do the PAM session things (it can use pam for checking
> passwords, but only for that). And I'm afraid it's not reasonable to add
> support for it in lsh-2.x. Sorry about that.

I guess we’ll have to find a workaround, not sure what.

> Old discussion here:
> https://lists.debian.org/debian-devel/2000/10/msg01417.html
>
> I have softened a bit since ;-).

Heheh.  :-)

> I think proper PAM support is feature that fits well in the
> reorganized lsh-3 userauth, and that I guess lot of users nned. But
> not yet implemented there either.

Now you have an incentive?  ;-)

Thanks for your feedback,
Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.