Bug 1915 - SSH5.4p1 in the AIX server, the system output error(ERRPT) when the password change fails ADMCHG flag.
Summary: SSH5.4p1 in the AIX server, the system output error(ERRPT) when the password ...
Status: CLOSED WORKSFORME
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: sshd (show other bugs)
Version: 5.4p1
Hardware: All AIX
: P2 major
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-06-20 04:38 AEST by XYZ
Modified: 2021-04-23 15:00 AEST (History)
1 user (show)

See Also:


Attachments
Darren Tucker request file (16.32 KB, text/plain)
2011-06-23 02:27 AEST, XYZ
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description XYZ 2011-06-20 04:38:37 AEST
Hi. I report a bug.

Ssh5.4p1 in the AIX server, the system output error sshd when the password change fails ADMCHG flag.

AIX OS level : 6.1 or 5.3
SSH version : OpenSSH 5.4p1 , OpenSSL 0.9.8m
(Not reproduce version : OpenSSH 5.0p1 , OpenSSL 0.9.8h)


---[Error Description]-----------------

1) User has expired and followed with a flag ADMCHG.
 File in /etc/security/passd.
 flags = ADMCHG

2) Are instructed to change their password at login, it failed to enter the old password, the login fails.
 Login fhase:
  WARNING: Your password has expired.
  You must changes your password now and login again!
  Changing password for "UserName"
  "UserName"'s Old password
  password mismatch.
  Connection to "ServerName" closed

3) AIX server error(ERRPT) output by the system.
  # errpt -a
    LABEL:CORE_DUMP
    Class:S
    Type PERM
    WPAR:Global
    Resource Name:SYSPROC
    PROGRAM NAME:sshd


---[Survey results]-----------------

I contacted IBM support center, a defect of the sshd, where to quote your username when logging syslog, and that is to the core output is broken for the pointer.

------------------------------------

Please answer.
You look at it , thank you.
Comment 1 Darren Tucker 2011-06-20 10:05:12 AEST
Could you please attach (please use "Add an attachment") containing the server-side debug output from a problem account?  The easiest way to collect this is to run "/path/to/sshd -ddde -p 2222 2>&1 | tee sshd.out" on the server, then connect using "ssh -p 2222 yourserver".
Comment 2 XYZ 2011-06-23 02:17:46 AEST
TO:Darren Tucker

Thank you comment.
please see "sshd.out.txt".
Comment 3 XYZ 2011-06-23 02:27:21 AEST
Created attachment 2059 [details]
Darren Tucker request file

TO:Darren Tucker

Thank you comment.
please see "sshd.out.txt".
Comment 4 Darren Tucker 2011-06-23 08:12:37 AEST
The debug output indicates you're using modified binaries, probably from http://openssh-aix.sourceforge.net/ (which AFAICT doesn't even have source for the current version).  Can you reproduce the problem with unmodified code from http://www.openssh.com?
Comment 5 Darren Tucker 2011-11-04 11:00:30 AEDT
Please reopen if you can reproduce with a current, unmodified version from openssh.com.
Comment 6 Damien Miller 2021-04-23 15:00:25 AEST
closing resolved bugs as of 8.6p1 release