Expose SSH_AUTH_INFO_0 always to PAM auth modules.

This changes SSH_AUTH_INFO_0 to be exposed to PAM auth modules also when a password authentication method is in use and not only when a keyboard-interactive authentication method is in use.
openssh · Mar 30, 2024 · c2c0bdd · c2c0bdd
1 parent 02c5ad2
commit c2c0bdd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/auth-pam.c b/auth-pam.c
@@ -1375,6 +1375,8 @@ sshpam_auth_passwd(Authctxt *authctxt, const char *password)
 		fatal("PAM: %s: failed to set PAM_CONV: %s", __func__,
 		    pam_strerror(sshpam_handle, sshpam_err));
 
+	expose_authinfo(__func__);
+
 	sshpam_err = pam_authenticate(sshpam_handle, flags);
 	sshpam_password = NULL;
 	free(fake);