Bug 700

Summary: PAM support broken in 3.7.1p1
Product: Portable OpenSSH Reporter: Bryan Finn <bryan.finn>
Component: PAM supportAssignee: OpenSSH Bugzilla mailing list <openssh-bugs>
Status: CLOSED FIXED    
Severity: major    
Priority: P2    
Version: 3.7.1p1   
Hardware: All   
OS: Solaris   
Attachments:
Description Flags
sshd -ddd for Version 3.4
none
sshd -ddd for Version 3.7.1p2 none

Description Bryan Finn 2003-09-22 22:49:14 AEST
PAM support which worked up to version 3.6 is broken in version 3.7.1p1.  Does
not seem to be SSH client dependent.
Comment 1 Damien Miller 2003-09-23 12:32:36 AEST
This is not a bug report. We are not telepathic.
Comment 2 Bryan Finn 2003-09-23 17:50:45 AEST
OS = SunOS 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-4


PAM debug trace:
Sep 19 10:19:21 alfa.stud.slu.se pam_pwdfile[4898]: [ID 115474 auth.error] wrong
password for user l03mahe1
Sep 19 10:19:21 alfa.stud.slu.se dtlogin[4898]: [ID 427203 auth.debug]
pam_authenticate: error Authentication failed

Specify further information required (without snide "telepathic" comments please)
Comment 3 Fergus Donohue 2003-09-30 00:08:07 AEST
Created attachment 473 [details]
sshd -ddd for Version 3.4

Trace output for 3.4 (which works).
Comment 4 Fergus Donohue 2003-09-30 00:08:39 AEST
Created attachment 474 [details]
sshd -ddd for Version 3.7.1p2

Trace output for 3.7.1p2 (which doesn't work).
Comment 5 Fergus Donohue 2003-09-30 00:10:53 AEST
I too am using PAM (pam_ldap) with Solaris 8 and am seeing the same behaviour.

camac {506}# uname -a
SunOS camac 5.8 Generic_108528-21 sun4u sparc SUNW,Ultra-60
camac {507}#

I've attached the output from a "sshd -ddd" for both 3.4 which works and 
3.7.1p2 which doesn't!
Comment 6 Damien Miller 2003-09-30 10:00:59 AEST
Try setting "PasswordAuthentication no" and "ChallengeResponseAuthentication
yes" in sshd_config.
Comment 7 Fergus Donohue 2003-09-30 18:59:25 AEST
That's done it, Thanks Damien. Can this be added to the documentation?
Comment 8 Bryan Finn 2003-09-30 21:10:23 AEST
Yes, thank you.  Works for me too.
Comment 9 Damien Miller 2004-04-14 12:24:19 AEST
Mass change of RESOLVED bugs to CLOSED