RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-13 Thread Abdul Rahman

Need to have pam correctly configured:


If you are using PAM, you may need to manually install a PAM control
file as /etc/pam.d/sshd (or wherever your system prefers to keep
them).  Note that the service name used to start PAM is __progname,
which is the basename of the path of your sshd (e.g., the service name
for /usr/sbin/osshd will be osshd).  If you have renamed your sshd
executable, your PAM configuration may need to be modified.

A generic PAM configuration is included as contrib/sshd.pam.generic,
you may need to edit it before using it on your system. If you are
using a recent version of Red Hat Linux, the config file in
contrib/redhat/sshd.pam should be more useful.  Failure to install a
valid PAM file may result in an inability to use password
authentication.  On HP-UX 11 and Solaris, the standard /etc/pam.conf
configuration will work with sshd (sshd will match the other service
name).

In the INSTALL or README file in default build...


ar


Abdul Rahman, Ph.D.
Manager
Sevenspace
703.961.5765 D
703.625.9871 M

collaborate.compete.win


-Original Message-
From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 3:56 AM
To: [EMAIL PROTECTED]
Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords


Precedence: bulk


Well this is bizarre.

Default install of openssh on this linux box (originally RedHat
but I think someone's put a new kernel on it -- it reports itself
as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
Linux).

It all works.

Oh, except for logging in using password authentication.  It
prompts for a password, but reports incorrect password.  And,
umm, I'm pretty darn sure I type it correctly.  That's not an issue.

How the heck do I debug this?

-roy



RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-13 Thread Sundland, Raymond

RedHat uses PAM (then again, so do most Linux implementations).

Did you compile OpenSSH with PAM support?  If so, did you make the proper
entries in /etc/pam.conf or /etc/pam.d/ssh?  Are you getting PAM error
messages when you try to login using a password via SSH? (tail -f
/var/log/messages while you try to login and see what happens)

I believe it's the contrib/ directory in the OpenSSH tarball that has a
sample SSH PAM file.  If you compiled with PAM, you can just copy that file
into the /etc/pam.d file as 'ssh' and you shouldn't have any problems.

-Ray

| -Original Message-
| From: Jan Egeriis [mailto:[EMAIL PROTECTED]]
| Sent: Friday, August 10, 2001 9:13 AM
| To: Roy S. Rapoport; [EMAIL PROTECTED]
| Subject: Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords
| 
| 
|   charset=iso-8859-1
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Mailer: Microsoft Outlook Express 5.50.4133.2400
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
| Sender: [EMAIL PROTECTED]
| Precedence: bulk
| 
| Same problem here...
| Redhat 6.2 kernel 2.2.19 
| OpenSSH 2.9p2
| 
| Haven't found a solution yet. :-(
| 
| regards
| Jan
| 
| 
| 
| 
| - Original Message - 
| From: Roy S. Rapoport [EMAIL PROTECTED]
| To: [EMAIL PROTECTED]
| Sent: Friday, August 10, 2001 9:56 AM
| Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords
| 
| 
|  
|  Well this is bizarre.
|  
|  Default install of openssh on this linux box (originally RedHat
|  but I think someone's put a new kernel on it -- it reports itself
|  as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
|  Linux).
|  
|  It all works.
|  
|  Oh, except for logging in using password authentication.  It
|  prompts for a password, but reports incorrect password.  And,
|  umm, I'm pretty darn sure I type it correctly.  That's not an issue.
|  
|  How the heck do I debug this?
|  
|  -roy
| 



RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-13 Thread Roy S. Rapoport

Thanks to the myriad of people who pointed to PAM being the culprit here.
Thanks also to the people who pointed out this was in the archives (I'll
admit I was a little confused here because of my lack of clarity as to the
role of the two lists -- ssh@clinet and the secureshell lists).  It's all
working much better now.  I shall, from now on, read the INSTALL doc
religiously.

-roy




RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-13 Thread Sundland, Raymond

*Refreshing Sigh*

Another convert ;)



| -Original Message-
| From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]]
| Sent: Monday, August 13, 2001 3:26 PM
| To: [EMAIL PROTECTED]
| Subject: RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords
| 
| 
| Thanks to the myriad of people who pointed to PAM being the 
| culprit here.
| Thanks also to the people who pointed out this was in the 
| archives (I'll
| admit I was a little confused here because of my lack of 
| clarity as to the
| role of the two lists -- ssh@clinet and the secureshell 
| lists).  It's all
| working much better now.  I shall, from now on, read the INSTALL doc
| religiously.
| 
| -roy
| 



Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-10 Thread Daniel Fayette

Roy S. Rapoport wrote:
 
 Well this is bizarre.
 
 Default install of openssh on this linux box (originally RedHat
 but I think someone's put a new kernel on it -- it reports itself
 as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
 Linux).
 
 It all works.
 
 Oh, except for logging in using password authentication.  It
 prompts for a password, but reports incorrect password.  And,
 umm, I'm pretty darn sure I type it correctly.  That's not an issue.
 
 How the heck do I debug this?
 
 -roy

Try searching the archive before submitting questions.  This is from a
previous post.

On Wed, Aug 08, 2001 at 06:32:23AM -0500, Daniel Fayette wrote:
 Sir,
 
   Can you give me a break down of all the steps you did to get openssh to
 work with RH 6.2.  I have been haveing the same problem you described.

All I did was unroll openssh-2.9p2 and openssl-0.9.6a, compiled
--with-pam
and cp contrib/redhat/sshd.pam /etc/pam.d/sshd. I think that was it!

Mike

-- 
Wow a memory-mapped fork bomb! Now what on earth did you expect? - lkml

-- 
Dan Fayette
Senior Network Engineer
USTRANSCOM / J6-TE (Test and Engineering)
NCI Information Systems Inc.
Phone: 618.229.1817
DSN  : 779.1817



Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-10 Thread Jan Egeriis

Same problem here...
Redhat 6.2 kernel 2.2.19 
OpenSSH 2.9p2

Haven't found a solution yet. :-(

regards
Jan




- Original Message - 
From: Roy S. Rapoport [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 10, 2001 9:56 AM
Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords


 
 Well this is bizarre.
 
 Default install of openssh on this linux box (originally RedHat
 but I think someone's put a new kernel on it -- it reports itself
 as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
 Linux).
 
 It all works.
 
 Oh, except for logging in using password authentication.  It
 prompts for a password, but reports incorrect password.  And,
 umm, I'm pretty darn sure I type it correctly.  That's not an issue.
 
 How the heck do I debug this?
 
 -roy





Re: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-10 Thread James Henry


Just a shot in the dark, but you probably compiled without pam support. 

./configure --with-pam 

Either that or you didn't copy the pam config file from the distribution 
(under redhat in contrib) to /etc/pam.d/ 

 --James 

Jan Egeriis writes: 

 Same problem here...
 Redhat 6.2 kernel 2.2.19 
 OpenSSH 2.9p2 
 
 Haven't found a solution yet. :-( 
 
 regards
 Jan 
 
  
 
 
 - Original Message - 
 From: Roy S. Rapoport [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, August 10, 2001 9:56 AM
 Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords 
 
 
 
 Well this is bizarre. 
 
 Default install of openssh on this linux box (originally RedHat
 but I think someone's put a new kernel on it -- it reports itself
 as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
 Linux). 
 
 It all works. 
 
 Oh, except for logging in using password authentication.  It
 prompts for a password, but reports incorrect password.  And,
 umm, I'm pretty darn sure I type it correctly.  That's not an issue. 
 
 How the heck do I debug this? 
 
 -roy
  
 
 

 


 --James 



RE: OpenSSH 2.5.2p2, Linux, and not accepting passwords

2001-08-10 Thread Abdul Rahman

Looks like when you built it there were some issues 
with getting the pam situation worked out.

look at the README or INSTALL docs in the tarfile after
you built the ssh package...

If you are using PAM, you may need to manually install a PAM control
file as /etc/pam.d/sshd (or wherever your system prefers to keep
them).  Note that the service name used to start PAM is __progname,
which is the basename of the path of your sshd (e.g., the service name
for /usr/sbin/osshd will be osshd).  If you have renamed your sshd
executable, your PAM configuration may need to be modified.

A generic PAM configuration is included as contrib/sshd.pam.generic,
you may need to edit it before using it on your system. If you are
using a recent version of Red Hat Linux, the config file in
contrib/redhat/sshd.pam should be more useful.  Failure to install a
valid PAM file may result in an inability to use password
authentication.  On HP-UX 11 and Solaris, the standard /etc/pam.conf
configuration will work with sshd (sshd will match the other service
name).


Abdul Rahman, Ph.D.
Manager
Sevenspace
703.961.5765 D
703.625.9871 M

collaborate.compete.win


-Original Message-
From: Roy S. Rapoport [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 3:56 AM
To: [EMAIL PROTECTED]
Subject: OpenSSH 2.5.2p2, Linux, and not accepting passwords



Well this is bizarre.

Default install of openssh on this linux box (originally RedHat
but I think someone's put a new kernel on it -- it reports itself
as 2.2.12-20 when I do uname -a.  Sorry, Solaris is my forte, not
Linux).

It all works.

Oh, except for logging in using password authentication.  It
prompts for a password, but reports incorrect password.  And,
umm, I'm pretty darn sure I type it correctly.  That's not an issue.

How the heck do I debug this?

-roy