UseLogin results in error on AIX 5L: /dev/pts/#: 3004-004 You must "exec" login from the lowest login shell.

From: Tim B. (foutebingo@hotmail.com)
Date: 06/03/02 

From: "Tim B." <foutebingo@hotmail.com>
Date: Mon, 3 Jun 2002 17:24:59 +0200

Dear all,

I am trying to configure a server so that user may login using ssh. We
should like to restrict access to the system to SSH to prevent the use of
unencrypted passwords. But I am experiencing the following problem. I want
to make use of the AIX-built-in facility of forcing users to change their
passwords after they expire or have been changed by root.

There's no problem with first party login-tools such as the telnet shipped
with AIX. But, like I said, I want to restrict access to a secure protocol.
I have successfully installed OpenSSH 3.2.3p1 (using openssl 0.9.6c, zlib
1.1.4, tcp-wrappers 7.6). But the sshd seems to circumvent the OS native
login procedure so that password changes are no longer enforced.

After searching the web, faq's and contacting my AIX vendor I still haven't
found a solution. The most promissing hint I could find was to enable the
UseLogin statement in the sshd_config file. But when I do this I get the
following error:

Upon contacting the sshd, it asks for a password to authenticate the use --
So far, so good.
Then following message is displayed and the connection is lost:

/dev/pts/0: 3004-004 You must "exec" login from the lowest login shell.

Does anyone have an idea how I could

1) make the UseLogin statement work for OpenSSH on AIX 5L

or 2) find a SSHD - implementation that will allow me to still use the AIX
password change enforcement facilities.

Thanks for your help, time and effort,

regards,

Tim Bruijnzeels
junior system administrator
Nijmegen University
The Netherlands
t.bruijnzeels@uci.kun.nl

Relevant Pages

  • UseLogin results in error on AIX 5L: /dev/pts/#: 3004-004 You must "exec" login from the l
    ... I am trying to configure a server so that user may login using ssh. ... But, like I said, I want to restrict access to a secure protocol. ... login procedure so that password changes are no longer enforced. ... faq's and contacting my AIX vendor I still haven't ...
    (comp.security.ssh)
  • Re: SSH password Expiry
    ... I read on comp.security.ssh that forced password changes are supported ... Subject: SSH password Expiry ... Before acting on this e-mail or opening any attachments you are ... All our AIX users passwords expiry after a certain amount of days, ...
    (AIX-L)
  • Re: AIX 5.2L "who" question
    ... You have solved my problem with the who command showing ... ssh logins. ... I have another ssh question if you could help. ... Subject: AIX 5.2L "who" question ...
    (AIX-L)
  • Re: How restrict network login on AIX for everything BUT SSH? (RLOGIN=FALSE & loginrestrictions
    ... Unfortunately I WANT to disable telnet, rsh, rlogin etc for an account, BUT keep SSH enabled. ... However in Aix v5.3 full pam support was added, and our LAM module broke and we have been unable to figure out how to get it working again. ...
    (comp.security.ssh)
  • Re: AIX 5.2L "who" question
    ... SSH is corrupting the utmp file! ... where did you get the SSH server you are running? ... We have a 44P-270 running AIX 5.2L, when users connected via ssh they can't ... Monitoring ...
    (AIX-L)
Quantcast