- (dtucker) [README.platform] Add PAM section.

[openssh.git] / README.platform

diff --git a/README.platform b/README.platform
index 47e4b946a4a8df3b02dd3734591ff3050b5b99a0..7356c1057d6dc852f70a21b97dfc5d553f9ee71b 100644 (file)
--- a/README.platform
+++ b/README.platform
@@ -45,4 +45,14 @@ number is already in use on your system, you may change it at build time
 by configure'ing --with-cflags=-DAUE_openssh=32801 then rebuilding.
 
 
+Platforms using PAM
+-------------------
+As of OpenSSH 4.3p1, sshd will no longer check /etc/nologin itself when
+PAM is enabled.  To maintain existing behaviour, pam_nologin should be
+added to sshd's session stack which will prevent users from starting shell
+sessions.  Alternatively, pam_nologin can be added to either the auth or
+account stacks which will prevent authentication entirely, but will still
+return the output from pam_nologin to the client.
+
+
 $Id$