Bug 700 - PAM support broken in 3.7.1p1
Summary: PAM support broken in 3.7.1p1
Status: CLOSED FIXED
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: PAM support (show other bugs)
Version: 3.7.1p1
Hardware: All Solaris
: P2 major
Assignee: OpenSSH Bugzilla mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-22 22:49 AEST by Bryan Finn
Modified: 2004-04-14 12:24 AEST (History)
0 users

See Also:


Attachments
sshd -ddd for Version 3.4 (11.92 KB, text/plain)
2003-09-30 00:08 AEST, Fergus Donohue
no flags Details
sshd -ddd for Version 3.7.1p2 (9.25 KB, text/plain)
2003-09-30 00:08 AEST, Fergus Donohue
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Bryan Finn 2003-09-22 22:49:14 AEST
PAM support which worked up to version 3.6 is broken in version 3.7.1p1.  Does
not seem to be SSH client dependent.
Comment 1 Damien Miller 2003-09-23 12:32:36 AEST
This is not a bug report. We are not telepathic.
Comment 2 Bryan Finn 2003-09-23 17:50:45 AEST
OS = SunOS 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-4


PAM debug trace:
Sep 19 10:19:21 alfa.stud.slu.se pam_pwdfile[4898]: [ID 115474 auth.error] wrong
password for user l03mahe1
Sep 19 10:19:21 alfa.stud.slu.se dtlogin[4898]: [ID 427203 auth.debug]
pam_authenticate: error Authentication failed

Specify further information required (without snide "telepathic" comments please)
Comment 3 Fergus Donohue 2003-09-30 00:08:07 AEST
Created attachment 473 [details]
sshd -ddd for Version 3.4

Trace output for 3.4 (which works).
Comment 4 Fergus Donohue 2003-09-30 00:08:39 AEST
Created attachment 474 [details]
sshd -ddd for Version 3.7.1p2

Trace output for 3.7.1p2 (which doesn't work).
Comment 5 Fergus Donohue 2003-09-30 00:10:53 AEST
I too am using PAM (pam_ldap) with Solaris 8 and am seeing the same behaviour.

camac {506}# uname -a
SunOS camac 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-60
camac {507}#

I've attached the output from a "sshd -ddd" for both 3.4 which works and 
3.7.1p2 which doesn't!
Comment 6 Damien Miller 2003-09-30 10:00:59 AEST
Try setting "PasswordAuthentication no" and "ChallengeResponseAuthentication
yes" in sshd_config.
Comment 7 Fergus Donohue 2003-09-30 18:59:25 AEST
That's done it, Thanks Damien. Can this be added to the documentation?
Comment 8 Bryan Finn 2003-09-30 21:10:23 AEST
Yes, thank you.  Works for me too.
Comment 9 Damien Miller 2004-04-14 12:24:19 AEST
Mass change of RESOLVED bugs to CLOSED