Mailing List Archive: [Bug 700] PAM support broken in 3.7.1p1

[Bug 700] PAM support broken in 3.7.1p1

bugzilla-daemon at mindrot

Sep 22, 2003, 4:49 AM

Post #1 of 10 (1507 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

Summary: PAM support broken in 3.7.1p1
Product: Portable OpenSSH
Version: 3.7.1p1
Platform: All
OS/Version: Solaris
Status: NEW
Severity: major
Priority: P2
Component: PAM support
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: bryan.finn@data.slu.se

PAM support which worked up to version 3.6 is broken in version 3.7.1p1. Does
not seem to be SSH client dependent.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 22, 2003, 6:32 PM

Post #2 of 10 (1497 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

djm@mindrot.org changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID

------- Additional Comments From djm@mindrot.org 2003-09-23 12:32 -------
This is not a bug report. We are not telepathic.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 22, 2003, 11:44 PM

Post #3 of 10 (1489 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

bryan.finn@data.slu.se changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |REOPENED
Resolution|INVALID |

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 22, 2003, 11:50 PM

Post #4 of 10 (1488 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From bryan.finn@data.slu.se 2003-09-23 17:50 -------
OS = SunOS 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-4

PAM debug trace:
Sep 19 10:19:21 alfa.stud.slu.se pam_pwdfile[4898]: [ID 115474 auth.error] wrong
password for user l03mahe1
Sep 19 10:19:21 alfa.stud.slu.se dtlogin[4898]: [ID 427203 auth.debug]
pam_authenticate: error Authentication failed

Specify further information required (without snide "telepathic" comments please)

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 29, 2003, 6:08 AM

Post #5 of 10 (1490 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From Fergus.Donohue@dcu.ie 2003-09-30 00:08 -------
Created an attachment (id=473)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=473&action=view)
sshd -ddd for Version 3.4

Trace output for 3.4 (which works).

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 29, 2003, 6:08 AM

Post #6 of 10 (1495 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From Fergus.Donohue@dcu.ie 2003-09-30 00:08 -------
Created an attachment (id=474)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=474&action=view)
sshd -ddd for Version 3.7.1p2

Trace output for 3.7.1p2 (which doesn't work).

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 29, 2003, 6:10 AM

Post #7 of 10 (1495 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From Fergus.Donohue@dcu.ie 2003-09-30 00:10 -------
I too am using PAM (pam_ldap) with Solaris 8 and am seeing the same behaviour.

camac {506}# uname -a
SunOS camac 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-60
camac {507}#

I've attached the output from a "sshd -ddd" for both 3.4 which works and
3.7.1p2 which doesn't!

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 29, 2003, 4:01 PM

Post #8 of 10 (1489 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From djm@mindrot.org 2003-09-30 10:00 -------
Try setting "PasswordAuthentication no" and "ChallengeResponseAuthentication
yes" in sshd_config.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 30, 2003, 12:59 AM

Post #9 of 10 (1490 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

------- Additional Comments From Fergus.Donohue@dcu.ie 2003-09-30 18:59 -------
That's done it, Thanks Damien. Can this be added to the documentation?

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 700] PAM support broken in 3.7.1p1 [ In reply to ]

bugzilla-daemon at mindrot

Sep 30, 2003, 3:10 AM

Post #10 of 10 (1490 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=700

bryan.finn@data.slu.se changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|REOPENED |RESOLVED
Resolution| |FIXED

------- Additional Comments From bryan.finn@data.slu.se 2003-09-30 21:10 -------
Yes, thank you. Works for me too.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.