Bug 1227

Summary:	sftp-server does not respect rlogin = false
Product:	Portable OpenSSH	Reporter:	Cris B <cris>
Component:	sftp-server	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	CLOSED DUPLICATE
Severity:	normal
Priority:	P2
Version:	4.3p2
Hardware:	PPC
OS:	AIX

Description Cris B 2006-09-13 22:15:01 AEST

using the packages from http://sf.net/projects/openssh-aix

have set a user 'appa' to be rlogin=false in /etc/security/users

when I 'ssh appa@gromit':

appa@gromit's password:
Received disconnect from 158.234.7.207: 2: Remote login for account appa is not
allowed.

when i 'scp *.txt appa@gromit:~':

appa@gromit's password:
Received disconnect from 158.234.7.207: 2: Remote login for account appa is not
allowed.
lost connection

so all good so far, but when I 'sftp appa@gromit':

Connecting to gromit...
appa@gromit's password:
sftp>

i am allowed to log in!!!!! this happens only on AIX5.3. On AIX5.2 (same  user setup) I get:

Connecting to fenris...
appa@fenris's password:
Permission denied, please try again.

Comment 1 Darren Tucker 2006-09-13 22:18:45 AEST


*** This bug has been marked as a duplicate of bug 1226 ***

Comment 2 Darren Tucker 2006-10-07 11:45:53 AEST

Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.