Re: OpenSSH 2.9 problems
In article <[EMAIL PROTECTED]>, Akinori MUSHA <[EMAIL PROTECTED]> wrote: > I have some problems with the newly updated OpenSSH 2.9. > > 1. Sshd fails to authenticate via PAM. > > May 5 19:18:07 archon sshd[803]: fatal: PAM setcred failed[6]: Permission denied If you would just like to get it to work until the person who broke it fixes it properly, the patch below will accomplish that. This is _not_ a correct fix, and it should definitely not be committed. John Index: auth-pam.c === RCS file: /home/ncvs/src/crypto/openssh/auth-pam.c,v retrieving revision 1.3 diff -u -r1.3 auth-pam.c --- auth-pam.c 2001/05/05 01:12:45 1.3 +++ auth-pam.c 2001/05/08 02:24:45 @@ -151,11 +151,13 @@ pam_retval, PAM_STRERROR(pamh, pam_retval)); } +#if 0 /* XXX */ pam_retval = pam_setcred(pamh, PAM_DELETE_CRED); if (pam_retval != PAM_SUCCESS) { debug("Cannot delete credentials[%d]: %.200s", pam_retval, PAM_STRERROR(pamh, pam_retval)); } +#endif pam_retval = pam_end(pamh, pam_retval); if (pam_retval != PAM_SUCCESS) { @@ -261,6 +263,7 @@ /* Set PAM credentials */ void do_pam_setcred(void) { +#if 0 /* XXX */ int pam_retval; debug("PAM establishing creds"); @@ -269,6 +272,7 @@ fatal("PAM setcred failed[%d]: %.200s", pam_retval, PAM_STRERROR(pamh, pam_retval)); } +#endif } /* accessor function for file scope static variable */ To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: OpenSSH 2.9 problems
"Akinori MUSHA" <[EMAIL PROTECTED]> writes: > 1. Sshd fails to authenticate via PAM. > > May 5 19:18:07 archon sshd[803]: fatal: PAM setcred failed[6]: Permission denied PAM fuckup, not OpenSSH's fault. You'll get the same error trying to su from root to a non-root user. > 3. Somehow the default location of the ssh host key files has been > changed from /etc/ssh to /etc. Was it intentional? That has been fixed. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: OpenSSH 2.9 problems
In article <[EMAIL PROTECTED]>, John Polstra <[EMAIL PROTECTED]> wrote: > In article <[EMAIL PROTECTED]>, > Akinori MUSHA <[EMAIL PROTECTED]> wrote: > > I have some problems with the newly updated OpenSSH 2.9. > > > > 1. Sshd fails to authenticate via PAM. > > > > May 5 19:18:07 archon sshd[803]: fatal: PAM setcred failed[6]: Permission denied > > I am seeing this same problem. Here's another one: blake$ slogin localhost socket: Protocol not supported <=== Eh? jdp@localhost's password: John -- John Polstra [EMAIL PROTECTED] John D. Polstra & Co., Inc.Seattle, Washington USA "Disappointment is a good sign of basic intelligence." -- Chögyam Trungpa To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: OpenSSH 2.9 problems
In article <[EMAIL PROTECTED]>, Akinori MUSHA <[EMAIL PROTECTED]> wrote: > I have some problems with the newly updated OpenSSH 2.9. > > 1. Sshd fails to authenticate via PAM. > > May 5 19:18:07 archon sshd[803]: fatal: PAM setcred failed[6]: Permission denied I am seeing this same problem. John -- John Polstra [EMAIL PROTECTED] John D. Polstra & Co., Inc.Seattle, Washington USA "Disappointment is a good sign of basic intelligence." -- Chögyam Trungpa To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
OpenSSH 2.9 problems
I have some problems with the newly updated OpenSSH 2.9. 1. Sshd fails to authenticate via PAM. May 5 19:18:07 archon sshd[803]: fatal: PAM setcred failed[6]: Permission denied 2. << ln -s hostname `which ssh`; ./hostname >> doesn't work anymore. It used to slogin to the host in the previous versions but now it just shows the help screen. 3. Somehow the default location of the ssh host key files has been changed from /etc/ssh to /etc. Was it intentional? Any ideas? -- / /__ __Akinori.org / MUSHA.org / ) ) ) ) / FreeBSD.org / Ruby-lang.org Akinori MUSHA aka / (_ / ( (__( @ iDaemons.org / and.or.jp "Freeze this moment a little bit longer, make each impression a little bit stronger.. Experience slips away -- Time stand still" To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message