Re: Failed Password Error

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 12/21/03 

Date: Sun, 21 Dec 2003 01:27:15 +0000 (UTC)

In article <vej9uvsg6m0ri7j27ddc2u4iaoqq1lvc7i@4ax.com>,
Mark Olbert <mark@arcabama.com> wrote:
>I used to be a happy camper... but now that I've upgraded to 3.7p1 I
>can't connect through my sshd from a remote connection where I always
>could before.

3.7p1 has a nasty bug in the PAM support and you shouldn't use it.
http://www.openssh.org/txt/sshpam.adv

>I'm getting the "Failed password for <user>..." problem (I also used to
>get the "Nasty PTR..." problem, but I fixed that).

With 3.7.1p2, try it with the following in sshd_config:
UsePAM yes
PasswordAuthentication no
ChallengeResponseAuthentication yes 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • Re: how would openssh react face to an attack ?
    ... >but how would it react face to an attack? ... account after X password failures. ... if the OS doesn't support lockout then sshd doesn't either. ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: telnet tunnelling ssh
    ... >That host has ssh package installed and sshd up and running. ... >(All looks silly but it's the truth) ... >connection already established? ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: AIX 5.3 LDAP PAM PrivilegeSeperation
    ... > If we run sshd in non-privilegeseperation mode, ... > expiry, when a user is REQUIRED to change the password, when a new ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: PAM and SSH
    ... It appears that for sshd, sshusers would have to be their primary group ... sshd checks the supplemental group ids by using getgrouplist. ... why I suggested using two AllowGroups directives in my follow-up post. ... Good judgement comes with experience. ...
    (SSH)
  • Re: key_read: missing keytype
    ... the logfiles indicated that my sshd doesn't check this ... uses that directory but OpenSSH doesn't. ... Good judgement comes with experience. ...
    (comp.security.ssh)