Re: Assistence with OpenSSH build/config on Red Hat 7.2

From: Brian (brianm_at_fsg1.nws.noaa.gov)
Date: 02/16/04

  • Next message: Darren Tucker: "Re: Assistence with OpenSSH build/config on Red Hat 7.2" 
    Date: Mon, 16 Feb 2004 16:10:16 -0500
To: Darren Tucker <dtucker@dodgy.net.au>

    Darren Tucker wrote:
    > In article <aPSdnTHxPawlBrPdRVn-jQ@adelphia.com>,
    > Brian <brianm@fsg1.nws.noaa.gov> wrote:
    >
    >>Darren Tucker wrote:
    >>
    >>>Try: ./configure --with-pam --with-md5-passwords
    >>>with "UsePAM yes", "ChallengeResponseAuthentication yes" and
    >>>"PasswordAuthentication no" in sshd_config.
    >>
    >>Thanks for the tip. No luck though, do you have any other ideas?
    >
    >
    > From the debugging in your original post:
    > debug1: kbdint_alloc: devices ''
    >
    > This indicates that the PAM challenge-response context could not be
    > initialized. This can happen if PAM is not enabled in the config
    > (ie no "UsePAM yes") or if pam_start fails for some reason. I would
    > guess that the original debugging was done without UsePAM=yes.
    >
    > I suggest you open a bug at bugzilla.mindrot.org and attach (note: do not
    > paste into the text box) the output from sshd -ddd with the 3 options
    > above in sshd_config. You may want to post the bug no. or a link to the
    > bug here for the benefit of anyone following this thread.
    >

    THANK YOU! THANK YOU! THANK YOU!! :-)

    It is working now and I'll give the details here to help anyone else who
    may run into this problem.

    I tried rebuilding 3.7.1p2 "one more time" before submitting to
    Bugzilla. I used the following build options you suggested (plus
    --with-tcp-wrappers) and make sequence:

    ./configure --with-pam --with-md5-passwords --with-tcp-wrappers \
       --prefix=/usr/local/openssh

    make clean
    make -j3
    make install

    ** Next comes the catch (I think)

    Edited the resulting /usr/local/openssh/etc/sshd_config file as follows
    per your original suggestions:

       UsePAM yes
       ChallengeResponseAuthentication yes
       PasswordAuthentication no

    I think that is where I got it wrong last time. After doing the make
    install, the installed sshd_config file was set as follows:

    #ChallengeResponseAuthentication yes
    #UsePAM yes

    I thought I'd read somewhere that these commented setting are defaults,
    so that you only need to uncomment them if you are going to change their
    values. Wrong! (I guess. At least in my case.) Once I uncommented those
    lines and restarted sshd, I was able to connect and use password
    authentication. Thanks a bunch!!!

    - - -

    I also went one step further and compiled an older version of OpenSSH --
    3.6.1p1 -- to see if I would have success with that version and I did! I
    used the same build options:

    ./configure --with-pam --with-md5-passwords --with-tcp-wrappers \
       --prefix=/usr/local/openssh

    make clean
    make -j3
    make install

    ** For this one, the default, out of the box sshd_config worked fine and
    allowed NIS users to ssh in from other hosts. FYI, here are what I think
    are the similar settings from the older OpenSSH config file:

    #PAMAuthenticationViaKbdInt no
    #PasswordAuthentication yes
    #ChallengeResponseAuthentication yes

    I did not uncomment them because I actually expected it to fail and then
    I was going to set them similar to the 3.7.1p2 settings and make sure it
    worked. It worked as is, so I decided not to disturb the default config
    file.

    Thanks again for your suggestions!
       Brian

  • Next message: Darren Tucker: "Re: Assistence with OpenSSH build/config on Red Hat 7.2"

    Relevant Pages

    • Re: Symantec Ghost 10.0 on XP SP2 w/WinDbg
      ... You do not even need to install the software, just boot the floppy and hit ... > In the past I've used DriveImage and later Symantec Ghost to image ... > target box with all debugging options enabled in the boot.ini file and ...
      (microsoft.public.development.device.drivers)
    • Re: Trying to install Media Center Extender for Xbox 360 but it will only install Connect
      ... Win32 Version: 6.1.2715.2716.051020-1902) ... To enable just in time debugging, ... I did manually install extender by ... For More details check the Log File ...
      (microsoft.public.windows.mediacenter)
    • Re: Further Guidance on Remote office Printing
      ... From how I read the original post, you have not installed the proper drive on the terminal server correct? ... You have tried to install another driver to replace it. ... The .inf file that you brought up will tell windows to use that driver instead of what the client has. ...
      (microsoft.public.windows.terminal_services)
    • RE: Debugging mode failure
      ... As for the VS 2003's debugging issue, is it occuring right after you ... installed the vs 2005 and is it always working correctly before you install ... application(host in IIS rather than filesystem based) through VS 2005? ... For ASP.NET application, there exists application extension ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: System Restore not functioning
      ... > original post so as not to repeat the problems on this ... right click on it and select 'Install'. ... >>> the error msg and sending in my error report, ... Probably since my Sys Restore ...
      (microsoft.public.windowsxp.perform_maintain)