Mailing List Archive: [Bug 1226] sftp-server does not respect rlogin = false

[Bug 1226] sftp-server does not respect rlogin = false

Sep 13, 2006, 4:55 AM

Post #1 of 3 (785 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=1226

Summary: sftp-server does not respect rlogin = false
Product: Portable OpenSSH
Version: 4.3p2
Platform: PPC
OS/Version: AIX
Status: NEW
Severity: normal
Priority: P2
Component: sftp-server
AssignedTo: bitbucket@mindrot.org
ReportedBy: cris@beebgames.com

using the packages from http://sf.net/projects/openssh-aix

have set a user 'appa' to be rlogin=false in /etc/security/users

when I 'ssh appa@gromit':

appa@gromit's password:
Received disconnect from 158.234.7.207: 2: Remote login for account
appa is not
allowed.

when i 'scp *.txt appa@gromit:~':

appa@gromit's password:
Received disconnect from 158.234.7.207: 2: Remote login for account
appa is not
allowed.
lost connection

so all good so far, but when I 'sftp appa@gromit':

Connecting to gromit...
appa@gromit's password:
sftp>

i am allowed to log in!!!!! this happens only on AIX5.3. On AIX5.2
(same user setup) I get:

Connecting to fenris...
appa@fenris's password:
Permission denied, please try again.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-bugs

[Bug 1226] sftp-server does not respect rlogin = false [ In reply to ]

bugzilla-daemon at mindrot

Sep 13, 2006, 5:16 AM

Post #2 of 3 (748 views)

Permalink

http://bugzilla.mindrot.org/show_bug.cgi?id=1226

------- Comment #1 from dtucker@zip.com.au 2006-09-13 22:16 -------
(In reply to comment #0)
> using the packages from http://sf.net/projects/openssh-aix

We can't help you, you'll have to follow this up with them. Last time
I checked those packages a) contained modifications b) to which there's
no source and c) are version 4.1p1 (not 4.3p1, which is what this bug
is against).

If you are able to reproduce this with the vanilla source from
openssh.com then we may be able to help you (but the rlogin check is in
allowed_user() which is always called, so I doubt you'll see it).

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-bugs

[Bug 1226] sftp-server does not respect rlogin = false [ In reply to ]

bugzilla-daemon at mindrot

Sep 13, 2006, 5:18 AM

Post #3 of 3 (766 views)

Permalink

http://bugzilla.mindrot.org/show_bug.cgi?id=1226

------- Comment #2 from dtucker@zip.com.au 2006-09-13 22:18 -------
*** Bug 1227 has been marked as a duplicate of this bug. ***

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-bugs