Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-92932

Removal of pam_ssh_agent_auth sub-package breaks smart-card/sudo use-case in RHEL10

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • openssh
    • None
    • No
    • Moderate
    • rhel-security-crypto-diamonds
    • ssg_security
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      The removal of pam_ssh_agent_auth sub-package in RHEL-10 breaks smart-card/sudo use-case as described here (for RHEL-9):

      https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_smart_card_authentication/assembly_authenticating-to-sudo-remotely-using-smart-cards_managing-smart-card-authentication#proc_setting-up-the-pam-module-for-sudo_assembly_authenticating-to-sudo-remotely-using-smart-cards

      The ask here is two-fold:

      1) Package an alternative software like it was already planned in RHEL-29735

      2) Identify an alternative solution based on the software stack that we ship in RHEL-10.0

       

              dbelyavs@redhat.com Dmitry Belyavskiy
              rhn-support-tscherf Thorsten Scherf
              Pavel Brezina, Sumit Bose
              Votes:
              0 Vote for this issue
              Watchers:
              17 Start watching this issue

                Created:
                Updated: