Re: Error when changing expired password during login

On 2005-12-16, Steve <sbassle@xxxxxxxxxxxxxxxxxxx> wrote:
> I am running OpenSSH_4.1p1 on AIX 5.3.03. When I reset a user's
> password, a flag gets set that requires that they change their password
> as soon as they login. When they login, they get a message stating
> that they must change their password and then login again - as
> expected. The password change proceeds normally, but as soon as they
> enter the new password for the second time, this message immediately
> appears in the syslog: "sshd[20974]: error: getsockname failed: A file
> descriptor does not refer to an open file" and the system does NOT log
> them off. (20974 is the PID of the new user's shell process.) A
> couple of seconds later, the same message again appears in the syslog.
>
> I have two other machines with the same levels of AIX and SSH that do
> not do this. I've searched and cannot find any difference in the SSH
> configuration between the various machines. Could this be a file
> permission error, or network configuration, or ...?

I've not heard of this before, but I would guess that the difference is
one of the UsePrivilegeSeparation or UsePAM settings in sshd_config.

I suggest that you open an OpenSSH bug over at http://bugzilla.mindrot.org
and we'll see what we can do to help you figure it out. If you do,
please mention which options you used when you compiled it, and any
non-default settings in sshd_config. Also, the debug output from sshd
-ddd would be useful (please create as an attachment rather than pasting
into the comment field).

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
.

Relevant Pages