Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Won't Fix
-
None
-
None
Description
I am filing this as a bug as this seems to be a security hole from a user perspective.
PAM auth plugin should utilize encryption for credentials just as is expected with default authentication methods (perhaps via the default authentication plugin or other encryption scheme).
This should happen regardless of TLS or REQUIRE SSL grant etc.