Fix PAM Auth for exec sessions with allocated TTY#61690
Conversation
|
@Joerger can we also cover that |
26b86c4 to
8cd5232
Compare
Added a manual test for the WebUI. |
Do we have an open issue for this? Should we create one if not? |
|
@eriktate Friendly ping to review |
Changelog: Fix an issue in the Teleport SSH Service where interactive PAM Auth modules always fail when trying to run exec sessions with tty allocated. e.g.
tsh ssh --tty <node> ls.Fixes #61689
Manual Testing (8cd5232):
tsh ssh --tty <node> lsprompts for authentication and succeeds.tsh ssh <node>prompts for authentication and succeeds.Note:
tsh ssh <node> lswithout-ttyand with interactive PAM auth fails both before and after this PR, as expected. Unfortunately, this failure manifests as a stalled connection which eventually times out or is canceled by the user, and it's unclear whether this is improvable within this boundaries of PAM. Either way, that issue is out of scope of this PR.