- (dtucker) [README.platform] Document the interaction between PermitRootLogin

   and the AIX native login restrictions.

diff --git a/ChangeLog b/ChangeLog
index 05ef32bba46267fafd5ca395f09e6f45306ed141..43eaa60e9f4efdc3c6045b6be61f4c89373d1994 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,7 @@
 20070809
  - (dtucker) [openbsd-compat/port-aix.c] Comment typo.
+ - (dtucker) [README.platform] Document the interaction between PermitRootLogin
+   and the AIX native login restrictions.
 
 20070808
  - (djm) OpenBSD CVS Sync

diff --git a/README.platform b/README.platform
index ed62527579b9da8007ce5804ac92176ca1aa0e69..c54dbf45001ae3a35193bbdf1d558de240193ea0 100644 (file)
--- a/README.platform
+++ b/README.platform
@@ -30,6 +30,12 @@ define the environment variable blibpath before running configure, eg
 blibpath=/lib:/usr/lib:/opt/freeware/lib ./configure \
   --with-ssl-dir=/opt/freeware --with-zlib=/opt/freeware
 
+If sshd is built with the WITH_AIXAUTHENTICATE option (which is enabled
+by default) then sshd checks that users are permitted via the
+loginrestrictions() function, in particular that the user has the
+"rlogin" attribute set.  This check is not done for the root account,
+instead the PermitRootLogin setting in sshd_config is used.
+
 
 Cygwin
 ------