Re: problem with ssh and pam

• Previous message: Joseph Vaughn: "sftp question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 19 Sep 2005 12:49:37 +1000
To: Jim Judd <jimj@netrake.com>

Jim Judd wrote:
> Hello, I have configured openssh on a machine running Gentoo to use
> PAM.
> Everything seems to be working ok, except for the number of challenge
> response that are received when a user tries to log on. They get one
> attempt and the connection is terminated instead of the 3 attempts if
> usePAM=no. I have tried a few things in the PAM, ssh, and system-auth
> files but no luck. Does anyone know if it is even possible to set the
> number of password challenges while using PAM with ssh?

You should get more than one auth attempt.

It actually sonds a bit like this glibc bug which sshd can tickle:
http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=111046966722997&w=2

Quick test: does creating a "lib" directory in sshd's privsep chroot dir
  make it work as you expect?

> Here is what I have so far;
>
> kernel 2.6.8 sshd OpenSSH_3.8.1p1, OpenSSL 0.9.7d 17 Mar 2004 Not
> sure how to tell what version of pam is on the box, 0.77 I guess
> since there is a libpam.so.0.77 on the box.
> distro is Gentoo

Which glibc version? Does it occur with the newer OpenSSH releases?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

• Previous message: Joseph Vaughn: "sftp question"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]