diff options
| author | delphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f> | 2020-06-26 04:46:45 +0000 |
|---|---|---|
| committer | delphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f> | 2020-06-26 04:46:45 +0000 |
| commit | a132367cabf802ae6ce730210ebadc2fe52f1da7 (patch) | |
| tree | 41a2608adbb525ef86455ecd77b92e1612a5b189 /crypto | |
| parent | 0f620c8c1392147055498ce5e1bf3e5a979a6240 (diff) | |
| download | freebsd-a132367cabf802ae6ce730210ebadc2fe52f1da7.tar.gz freebsd-a132367cabf802ae6ce730210ebadc2fe52f1da7.tar.bz2 | |
Don't log normal login_getpwclass(3) result.
The logging was introduced in r314527 but doesn't appear to be useful
for regular operation, and as the result, for users with no class set
(very common) the administrator would see a message like this in their
auth.log:
sshd[44251]: user root login class [preauth]
(note that the class was "" because that's what's typically configured
for most users; we would get 'default' if lc->lc_class is chosen)
Remove this log as it can be annoying as the lookup happen before
authentication and repeats, and our code is not acting upon lc_class
or pw_class directly anyways.
Reviewed by: cem, imp
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D24997
git-svn-id: http://svn.freebsd.org/base/head@362642 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/openssh/auth2.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/crypto/openssh/auth2.c b/crypto/openssh/auth2.c index 588a8346c43..612cc3f8f2f 100644 --- a/crypto/openssh/auth2.c +++ b/crypto/openssh/auth2.c @@ -317,8 +317,6 @@ input_userauth_request(int type, u_int32_t seq, struct ssh *ssh) #ifdef HAVE_LOGIN_CAP if (authctxt->pw != NULL && (lc = PRIVSEP(login_getpwclass(authctxt->pw))) != NULL) { - logit("user %s login class %s", authctxt->pw->pw_name, - authctxt->pw->pw_class); from_host = auth_get_canonical_hostname(ssh, options.use_dns); from_ip = ssh_remote_ipaddr(ssh); if (!auth_hostok(lc, from_host, from_ip)) { |