Re: Sshd having problems...?

From: Chris Byrnes (chris@jeah.net)
Date: 02/28/01 

Date: Wed, 28 Feb 2001 15:44:04 -0600 (CST)
From: Chris Byrnes <chris@jeah.net>
To: Jared Chenkin <chenkinj@voyager.bxscience.edu>

> Hi.
> I try to log into this machine via ssh and I get these messages:
>
> Feb 28 14:09:07 enterprise sshd[591]: fatal: PAM session setup failed[6]: Permission denied
> Feb 28 14:09:07 enterprise sshd[591]: no modules loaded for `sshd' service

Add this to /etc/pam.conf:

# SSH stuff
sshd auth sufficient pam_skey.so
sshd auth required pam_unix.so try_first_pass
sshd session required pam_permit.so

+ Chris Byrnes, chris@JEAH.net
 + JEAH Communications
  + 1-866-AWW-JEAH (Toll-Free)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Solaris ssh =?utf-8?b?cGFtX2tyYg==?=
    ... I am attempting to get our Solaris 9 and 10 servers to use campus kdc for ssh ... sshd auth sufficient pam_unix_auth.so.1 ... I am almost ready to give up on Sun's pam_krb and kerberos - (I've compiled the ...
    (comp.protocols.kerberos)
  • Re: ssh -t <host> /bin/sh trick (was Re: ftp access)
    ... I'm using an older setup (2.2.8 client, 3.4 server), both ... I'm not use OpenSSH and/or PAM with SSH on my box, ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: preventing direct root login on telnetd
    ... On Fri, 11 May 2001, Mike Tancsa wrote: ... But I think that telnet protocol is so crappy that ... I cannot force them to use ssh all the ... > with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: ssh tricks (was Re: ssh -t <host> /bin/sh trick (was Re: ftp access))
    ... > shells to prevent what Brooks was describing. ... Since the topic is 'ssh tricks', here's one that works with all ... can't access tty; job control turned off ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • ssh -t <host> /bin/sh trick (was Re: ftp access)
    ... Otherwise they can just use ssh to spawn a shell for themselves: ... that trick doesn't work anymore. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)