- (dtucker) [auth-pam.c auth.h auth2-none.c auth2.c monitor.c monitor_wrap.c]

   Bug #892: Send messages from failing PAM account modules to the client via
   SSH2_MSG_USERAUTH_BANNER messages.  Note that this will not happen with
   SSH2 kbdint authentication, which need to be dealt with separately.  ok djm@

1 files changed, 3 insertions, 0 deletions

diff --git a/monitor.c b/monitor.c
index b7463400e..00d4a785f 100644
--- a/monitor.c
+++ b/monitor.c
@@ -810,6 +810,9 @@ mm_answer_pam_account(int sock, Buffer *m)
         ret = do_pam_account();
 
         buffer_put_int(m, ret);
+        buffer_append(&loginmsg, "\0", 1);
+        buffer_put_cstring(m, buffer_ptr(&loginmsg));
+        buffer_clear(&loginmsg);
 
         mm_request_send(sock, MONITOR_ANS_PAM_ACCOUNT, m);