Re: Status of pam-1@ssh.com authentication in OpenSSH?

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 12/21/03

  • Next message: Paul J. Richardson: "SSH exploit" 
    Date: Sun, 21 Dec 2003 20:17:05 +0000 (UTC)

    In article <bs4k0j$qkr$1@news.hcf.jhu.edu>,
    Eduardo Duenez <e_duenez@hotmail.com> wrote:
    >Hi.
    >
    >Like many others, I have run into the problem that OpenSSH doesn't seem
    >to implement the pam-1@ssh.com authentication method. I did some
    >Googling and found older messages from other users with the exact same
    >problem as me. Succintly:
    >
    >*My (technology illiterate) employer implements a Pine mail service
    >through SSH allowing *only* pam-1@ssh.com as the authentication method.

    The "@ssh.com" part means it's a vendor-specific authentication
    method which OpenSSH does not understand (and is unlikely to). It seems
    to be approximately equivalent to keyboard-interactive.

    >*I use OpenSSH (3.7.1p2) under Linux and get a refused connection (no
    >password prompt at all).

    The best solution would be to have your employer allow a standard
    authentication method in addition to (or instead of) the vendor-
    specific one. Alternatively, you could install ssh.com's Unix client
    (as "ssh2") and use that to connect to your employer (you may not need
    to pay for it if you're using it on Linux, read the license carefully). 

    -- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
  • Next message: Paul J. Richardson: "SSH exploit"

    Relevant Pages

    • Re: Forcing new password at login (w/o requiring an old password) (sudo related)
      ... If you're using PAM then the user will be forced to set a new password ... when the existing one expires regardless of the authentication method. ... the user can sudo w/o additional authentication even ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: SSH Password Authentication
      ... > I logged in from SUSE 9.3 Server via my shell to a UNIX Backup Server. ... > The authentication method is with a password. ... Good judgement comes with experience. ...
      (comp.security.ssh)