RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Need to have pam correctly configured: If you are using PAM, you may need to manually install a PAM control file as /etc/pam.d/sshd (or wherever your system prefers to keep them). Note that the service name used to start PAM is __progname, which is the basename of the path of your sshd (e.g., the service name for /usr/sbin/osshd will be osshd). If you have renamed your sshd executable, your PAM configuration may need to be modified. A generic PAM configuration is included as contrib/sshd.pam.generic, you may need to edit it before using it on your system. If you are using a recent version of Red Hat Linux, the config file in contrib/redhat/sshd.pam should be more useful. Failure to install a valid PAM file may result in an inability to use password authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf configuration will work with sshd (sshd will match the other service name). In the INSTALL or README file in default build... ar Abdul Rahman, Ph.D. Manager Sevenspace 703.961.5765 D 703.625.9871 M collaborate.compete.win -Original Message- From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]] Sent: Friday, August 10, 2001 3:56 AM To: [EMAIL PROTECTED] Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords Precedence: bulk Well this is bizarre. Default install of openssh on this linux box (originally RedHat but I think someone's put a new kernel on it -- it reports itself as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not Linux). It all works. Oh, except for logging in using password authentication. It prompts for a password, but reports incorrect password. And, umm, I'm pretty darn sure I type it correctly. That's not an issue. How the heck do I debug this? -roy
RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
RedHat uses PAM (then again, so do most Linux implementations). Did you compile OpenSSH with PAM support? If so, did you make the proper entries in /etc/pam.conf or /etc/pam.d/ssh? Are you getting PAM error messages when you try to login using a password via SSH? (tail -f /var/log/messages while you try to login and see what happens) I believe it's the contrib/ directory in the OpenSSH tarball that has a sample SSH PAM file. If you compiled with PAM, you can just copy that file into the /etc/pam.d file as 'ssh' and you shouldn't have any problems. -Ray | -Original Message- | From: Jan Egeriis [mailto:[EMAIL PROTECTED]] | Sent: Friday, August 10, 2001 9:13 AM | To: Roy S. Rapoport; [EMAIL PROTECTED] | Subject: Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords | | | charset=iso-8859-1 | Content-Transfer-Encoding: 7bit | X-Priority: 3 | X-MSMail-Priority: Normal | X-Mailer: Microsoft Outlook Express 5.50.4133.2400 | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 | Sender: [EMAIL PROTECTED] | Precedence: bulk | | Same problem here... | Redhat 6.2 kernel 2.2.19 | OpenSSH 2.9p2 | | Haven't found a solution yet. :-( | | regards | Jan | | | | | - Original Message - | From: Roy S. Rapoport [EMAIL PROTECTED] | To: [EMAIL PROTECTED] | Sent: Friday, August 10, 2001 9:56 AM | Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords | | | | Well this is bizarre. | | Default install of openssh on this linux box (originally RedHat | but I think someone's put a new kernel on it -- it reports itself | as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not | Linux). | | It all works. | | Oh, except for logging in using password authentication. It | prompts for a password, but reports incorrect password. And, | umm, I'm pretty darn sure I type it correctly. That's not an issue. | | How the heck do I debug this? | | -roy |
RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Thanks to the myriad of people who pointed to PAM being the culprit here. Thanks also to the people who pointed out this was in the archives (I'll admit I was a little confused here because of my lack of clarity as to the role of the two lists -- ssh@clinet and the secureshell lists). It's all working much better now. I shall, from now on, read the INSTALL doc religiously. -roy
RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
*Refreshing Sigh* Another convert ;) | -Original Message- | From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]] | Sent: Monday, August 13, 2001 3:26 PM | To: [EMAIL PROTECTED] | Subject: RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords | | | Thanks to the myriad of people who pointed to PAM being the | culprit here. | Thanks also to the people who pointed out this was in the | archives (I'll | admit I was a little confused here because of my lack of | clarity as to the | role of the two lists -- ssh@clinet and the secureshell | lists). It's all | working much better now. I shall, from now on, read the INSTALL doc | religiously. | | -roy |
Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Roy S. Rapoport wrote: Well this is bizarre. Default install of openssh on this linux box (originally RedHat but I think someone's put a new kernel on it -- it reports itself as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not Linux). It all works. Oh, except for logging in using password authentication. It prompts for a password, but reports incorrect password. And, umm, I'm pretty darn sure I type it correctly. That's not an issue. How the heck do I debug this? -roy Try searching the archive before submitting questions. This is from a previous post. On Wed, Aug 08, 2001 at 06:32:23AM -0500, Daniel Fayette wrote: Sir, Can you give me a break down of all the steps you did to get openssh to work with RH 6.2. I have been haveing the same problem you described. All I did was unroll openssh-2.9p2 and openssl-0.9.6a, compiled --with-pam and cp contrib/redhat/sshd.pam /etc/pam.d/sshd. I think that was it! Mike -- Wow a memory-mapped fork bomb! Now what on earth did you expect? - lkml -- Dan Fayette Senior Network Engineer USTRANSCOM / J6-TE (Test and Engineering) NCI Information Systems Inc. Phone: 618.229.1817 DSN : 779.1817
Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Same problem here... Redhat 6.2 kernel 2.2.19 OpenSSH 2.9p2 Haven't found a solution yet. :-( regards Jan - Original Message - From: Roy S. Rapoport [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 10, 2001 9:56 AM Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords Well this is bizarre. Default install of openssh on this linux box (originally RedHat but I think someone's put a new kernel on it -- it reports itself as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not Linux). It all works. Oh, except for logging in using password authentication. It prompts for a password, but reports incorrect password. And, umm, I'm pretty darn sure I type it correctly. That's not an issue. How the heck do I debug this? -roy
Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Just a shot in the dark, but you probably compiled without pam support. ./configure --with-pam Either that or you didn't copy the pam config file from the distribution (under redhat in contrib) to /etc/pam.d/ --James Jan Egeriis writes: Same problem here... Redhat 6.2 kernel 2.2.19 OpenSSH 2.9p2 Haven't found a solution yet. :-( regards Jan - Original Message - From: Roy S. Rapoport [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 10, 2001 9:56 AM Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords Well this is bizarre. Default install of openssh on this linux box (originally RedHat but I think someone's put a new kernel on it -- it reports itself as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not Linux). It all works. Oh, except for logging in using password authentication. It prompts for a password, but reports incorrect password. And, umm, I'm pretty darn sure I type it correctly. That's not an issue. How the heck do I debug this? -roy --James
RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
Looks like when you built it there were some issues with getting the pam situation worked out. look at the README or INSTALL docs in the tarfile after you built the ssh package... If you are using PAM, you may need to manually install a PAM control file as /etc/pam.d/sshd (or wherever your system prefers to keep them). Note that the service name used to start PAM is __progname, which is the basename of the path of your sshd (e.g., the service name for /usr/sbin/osshd will be osshd). If you have renamed your sshd executable, your PAM configuration may need to be modified. A generic PAM configuration is included as contrib/sshd.pam.generic, you may need to edit it before using it on your system. If you are using a recent version of Red Hat Linux, the config file in contrib/redhat/sshd.pam should be more useful. Failure to install a valid PAM file may result in an inability to use password authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf configuration will work with sshd (sshd will match the other service name). Abdul Rahman, Ph.D. Manager Sevenspace 703.961.5765 D 703.625.9871 M collaborate.compete.win -Original Message- From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]] Sent: Friday, August 10, 2001 3:56 AM To: [EMAIL PROTECTED] Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords Well this is bizarre. Default install of openssh on this linux box (originally RedHat but I think someone's put a new kernel on it -- it reports itself as 2.2.12-20 when I do uname -a. Sorry, Solaris is my forte, not Linux). It all works. Oh, except for logging in using password authentication. It prompts for a password, but reports incorrect password. And, umm, I'm pretty darn sure I type it correctly. That's not an issue. How the heck do I debug this? -roy