From 6b4146ad739da603a298474db67824532508c3b8 Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Wed, 14 Feb 2001 00:45:51 +1100 Subject: - (djm) Move PAM session initialisation until after fork in sshd. Patch from Nalin Dahyabhai --- session.c | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) (limited to 'session.c') diff --git a/session.c b/session.c index 9b860c29e..7319df3d1 100644 --- a/session.c +++ b/session.c @@ -484,10 +484,6 @@ do_exec_no_pty(Session *s, const char *command, struct passwd * pw) session_proctitle(s); -#ifdef USE_PAM - do_pam_setcred(); -#endif /* USE_PAM */ - /* Fork the child. */ if ((pid = fork()) == 0) { /* Child. Reinitialize the log since the pid has changed. */ @@ -600,11 +596,6 @@ do_exec_pty(Session *s, const char *command, struct passwd * pw) ptyfd = s->ptyfd; ttyfd = s->ttyfd; -#ifdef USE_PAM - do_pam_session(pw->pw_name, s->tty); - do_pam_setcred(); -#endif /* USE_PAM */ - /* Fork the child. */ if ((pid = fork()) == 0) { /* Child. Reinitialize the log because the pid has changed. */ @@ -1156,6 +1147,11 @@ do_child(const char *command, struct passwd * pw, const char *term, shell = login_getcapstr(lc, "shell", (char *)shell, (char *)shell); #endif +#ifdef USE_PAM + do_pam_session(pw->pw_name, ttyname); + do_pam_setcred(); +#endif /* USE_PAM */ + #ifdef AFS /* Try to get AFS tokens for the local cell. */ if (k_hasafs()) { -- cgit v1.2.3