Bug#412061: [Pkg-shadow-devel] Bug#412061: login: su ends PAM sesstion in subshell

[Nicolas François]

Hello,

On Fri, Feb 23, 2007 at 09:05:57AM -0800, rra at debian.org wrote:
> 
> I'm not sure if this is the correct behavior or not.  I inherited it, and
> I don't know if there's any documentation about what one is *supposed* to
> to.  It causes strange problems on Solaris 8 and 9 as well (I haven't been
> able to test Solaris 10).

(IIRC, OpenSolaris 10's su does not open PAM sessions.)

pam-krb5's behavior is probably correct. (maybe it could implement
PAM_DATA_SILENT support for pam_end; but it would not help in this case,
as su do not use it;)

Philipp, does su seems to behave correctly when you remove the pam_end
call in the child?
My current opinion is that we should remove this pam_end, which would make
the su behavior consistent with login. (BTW, does login behaves correctly
regarding pam-krb5?)

Kind Regards,
-- 
Nekral