diff --git a/en/releases/5.0R/todo.sgml b/en/releases/5.0R/todo.sgml
index 6f561869de..96e200e2dd 100644
--- a/en/releases/5.0R/todo.sgml
+++ b/en/releases/5.0R/todo.sgml
@@ -1,7 +1,7 @@
-
+
%includes;
]>
@@ -178,7 +178,8 @@
| KerberosV, OpenSSH, and PAM |
In progress |
markm@FreeBSD.org, nectar@FreeBSD.org |
- KerberosV appears not to currently work with OpenSSH using PAM. |
+ KerberosV appears not to currently work with OpenSSH using PAM.
+ Bugs relating to pam_kerberosV have in large part been fixed. |
@@ -246,6 +247,17 @@
for tirpc unix domain socket transport naming, to sync to NetBSD.
+
+ | OpenSSH reports lastlog warning |
+ -- |
+ des@FreeBSD.org |
+ OpenSSH appears to invoke the PAM session code in the wrong process
+ when running with privsep, resulting in warnings of the form
+ "Nov 20 18:08:55 u60 sshd[2002]: /var/log/lastlog: Permission denied".
+ This may be a bug that requires reworking OpenSSH to work properly
+ with PAM, but should be resolved in some form for the release. |
+
+
&footer;