Hello all, I just wrote a new PAM module and I am using the new keyboard-interactive method within sshd with it. My problem is when I connect to the server using the keyboard interactive method using a windows ssh2 client it seems to ask for method none. Can someone explain to me why this is? Is there anyway I can force those clients to use the keyboard interactive method? I have attached openssh 2.9p1 output below. Thanks :) This is with windows Putty SSH2 client: ------------------------------------------------ Jun 8 14:42:32 this sshd[22254]: debug1: Forked child 23175. Jun 8 14:42:32 this sshd[23175]: Connection from 10.1.68.247 port 2339 Jun 8 14:42:32 this sshd[23175]: debug1: Client protocol version 1.99; client software version 2.3 SSH Secure Shell for Windows Jun 8 14:42:32 this sshd[23175]: debug1: no match: 2.3 SSH Secure Shell for Windows Jun 8 14:42:32 this sshd[23175]: Enabling compatibility mode for protocol 2.0 Jun 8 14:42:32 this sshd[23175]: debug1: Local version string SSH-1.99-OpenSSH_2.9p1 Jun 8 14:42:32 this sshd[23175]: debug1: Rhosts Authentication disabled, originating port not trusted. Jun 8 14:42:32 this sshd[23175]: debug1: list_hostkey_types: ssh-dss Jun 8 14:42:32 this sshd[23175]: debug1: SSH2_MSG_KEXINIT sent Jun 8 14:42:32 this sshd[23175]: debug1: SSH2_MSG_KEXINIT received Jun 8 14:42:32 this sshd[23175]: debug1: kex: client->server 3des-cbc hmac-md5 none Jun 8 14:42:32 this sshd[23175]: debug1: kex: server->client 3des-cbc hmac-md5 none Jun 8 14:42:32 this sshd[23175]: debug1: dh_gen_key: priv key bits set: 203/384 Jun 8 14:42:32 this sshd[23175]: debug1: bits set: 529/1024 Jun 8 14:42:32 this sshd[23175]: debug1: expecting SSH2_MSG_KEXDH_INIT Jun 8 14:42:32 this sshd[23175]: debug1: bits set: 487/1024 Jun 8 14:42:32 this sshd[23175]: debug1: sig size 20 20 Jun 8 14:42:32 this sshd[23175]: debug1: kex_derive_keys Jun 8 14:42:32 this sshd[23175]: debug1: newkeys: mode 1 Jun 8 14:42:32 this sshd[23175]: debug1: SSH2_MSG_NEWKEYS sent Jun 8 14:42:32 this sshd[23175]: debug1: waiting for SSH2_MSG_NEWKEYS Jun 8 14:42:32 this sshd[23175]: debug1: newkeys: mode 0 Jun 8 14:42:32 this sshd[23175]: debug1: SSH2_MSG_NEWKEYS received Jun 8 14:42:32 this sshd[23175]: debug1: KEX done Jun 8 14:42:32 this sshd[23175]: debug1: userauth-request for user aburr service ssh-connection method none Jun 8 14:42:32 this sshd[23175]: debug1: attempt 0 failures 0 Jun 8 14:42:32 this sshd[23175]: debug1: Starting up PAM with username "aburr" Jun 8 14:42:32 this sshd[23175]: Could not reverse map address 10.1.68.247. Jun 8 14:42:32 this sshd[23175]: debug1: PAM setting rhost to "10.1.68.247" Jun 8 14:42:32 this sshd[23175]: Failed none for aburr from 10.1.68.247 port 2339 ssh2 Jun 8 14:42:32 this sshd[23175]: debug1: userauth-request for user aburr service ssh-connection method none Jun 8 14:42:32 this sshd[23175]: debug1: attempt 1 failures 1 Jun 8 14:42:32 this sshd[23175]: Failed none for aburr from 10.1.68.247 port 2339 ssh2 Jun 8 14:42:32 this sshd[23175]: Received disconnect from 10.1.68.247: 14: No further authentication methods available. Jun 8 14:42:32 this sshd[23175]: debug1: Calling cleanup 0x8052670(0x0) Jun 8 14:42:32 this sshd[23175]: debug1: Calling cleanup 0x80681c0(0x0) With OpenSSH SSH2 Unix client: ------------------------------------------------- Jun 11 08:56:42 this sshd[22254]: debug1: Forked child 25341. Jun 11 08:56:42 this sshd[25341]: Connection from 10.1.90.240 port 2127 Jun 11 08:56:42 this sshd[25341]: debug1: Client protocol version 2.0; client so ftware version OpenSSH_2.5.2p2 Jun 11 08:56:42 this sshd[25341]: debug1: match: OpenSSH_2.5.2p2 pat ^OpenSSH_2\ .5\.[012] Jun 11 08:56:42 this sshd[25341]: Enabling compatibility mode for protocol 2.0 Jun 11 08:56:42 this sshd[25341]: debug1: Local version string SSH-1.99-OpenSSH_ 2.9p1 Jun 11 08:56:42 this sshd[25341]: debug1: Rhosts Authentication disabled, origin ating port not trusted. Jun 11 08:56:42 this sshd[25341]: debug1: list_hostkey_types: ssh-dss Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_KEXINIT sent Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_KEXINIT received Jun 11 08:56:42 this sshd[25341]: debug1: kex: client->server aes128-cbc hmac-md 5 none Jun 11 08:56:42 this sshd[25341]: debug1: kex: server->client aes128-cbc hmac-md 5 none Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_KEX_DH_GEX_REQUEST_OLD receiv ed Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent Jun 11 08:56:42 this sshd[25341]: debug1: dh_gen_key: priv key bits set: 124/256 Jun 11 08:56:42 this sshd[25341]: debug1: bits set: 996/2049 un 11 08:56:42 this sshd[25341]: debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT Jun 11 08:56:42 this sshd[25341]: debug1: bits set: 1044/2049 Jun 11 08:56:42 this sshd[25341]: debug1: sig size 20 20 Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent Jun 11 08:56:42 this sshd[25341]: debug1: kex_derive_keys Jun 11 08:56:42 this sshd[25341]: debug1: newkeys: mode 1 Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_NEWKEYS sent Jun 11 08:56:42 this sshd[25341]: debug1: waiting for SSH2_MSG_NEWKEYS Jun 11 08:56:42 this sshd[25341]: debug1: newkeys: mode 0 Jun 11 08:56:42 this sshd[25341]: debug1: SSH2_MSG_NEWKEYS received Jun 11 08:56:42 this sshd[25341]: debug1: KEX done Jun 11 08:56:42 this sshd[25341]: debug1: userauth-request for user aburr service ssh-connection method none Jun 11 08:56:42 this sshd[25341]: debug1: attempt 0 failures 0 Jun 11 08:56:42 this sshd[25341]: debug1: Starting up PAM with username "aburr" Jun 11 08:56:42 this sshd[25341]: Could not reverse map address 10.1.90.240. Jun 11 08:56:42 this sshd[25341]: debug1: PAM setting rhost to "10.1.90.240" Jun 11 08:56:42 this sshd[25341]: Failed none for aburr from 10.1.90.240 port 2127 ssh2 Jun 11 08:56:42 this sshd[25341]: debug1: userauth-request for user aburr service ssh-connection method keyboard-interactive Jun 11 08:56:42 this sshd[25341]: debug1: attempt 1 failures 1 Jun 11 08:56:42 this sshd[25341]: debug1: keyboard-interactive language devs Jun 11 08:56:42 this sshd[25341]: pam_radius_auth: Got user name aburr Jun 11 08:56:46 this sshd[25341]: debug1: got 1 responses Jun 11 08:56:46 this sshd[25341]: Accepted keyboard-interactive for aburr from 10.1.90.240 port 2127 ssh2 Jun 11 08:56:46 this sshd[25341]: debug1: Entering interactive session for SSH2. ____________________________ Andrew Burr [EMAIL PROTECTED]
