In article <200504010252.j312qIvG007547@vtn1.victoria.tc.ca>,
John Nemeth <jnemeth@victoria.tc.ca> wrote:
>     I did a sweep of the entire source tree looking for things that
>use getpw*.  Right now, I'm looking at OpenSSH.  It is so convoluted
>that it will be difficult to determine if its use of getpw* will
>conflict with its use of PAM.  Does somebody else want to look at it?
>Should I just change every use of getpw* in the source of sshd to
>getpw*_r?  Should we just ignore OpenSSH now that the sweep of all the
>PAM modules is done?

I'd say do it. Better be safe than sorry.

christos