From owner-freebsd-questions@FreeBSD.ORG  Sat Oct  7 03:41:43 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 48A3F16A403
	for <questions@freebsd.org>; Sat,  7 Oct 2006 03:41:43 +0000 (UTC)
	(envelope-from roberthuff@rcn.com)
Received: from smtp02.lnh.mail.rcn.net (smtp02.lnh.mail.rcn.net
	[207.172.157.102])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A9E5243D4C
	for <questions@freebsd.org>; Sat,  7 Oct 2006 03:41:42 +0000 (GMT)
	(envelope-from roberthuff@rcn.com)
Received: from mr02.lnh.mail.rcn.net ([207.172.157.22])
	by smtp02.lnh.mail.rcn.net with ESMTP; 06 Oct 2006 23:41:43 -0400
Received: from smtp01.lnh.mail.rcn.net (smtp01.lnh.mail.rcn.net [207.172.4.11])
	by mr02.lnh.mail.rcn.net (MOS 3.7.5a-GA) with ESMTP id MIJ97720;
	Fri, 6 Oct 2006 23:41:40 -0400 (EDT)
Received: from 209-6-203-219.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com (HELO
	jerusalem.litteratus.org.litteratus.org) ([209.6.203.219])
	by smtp01.lnh.mail.rcn.net with ESMTP; 06 Oct 2006 23:41:41 -0400
X-IronPort-AV: i="4.09,274,1157342400"; 
	d="scan'208"; a="289367643:sNHT25453156"
From: Robert Huff <roberthuff@rcn.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <17703.8714.727674.221682@jerusalem.litteratus.org>
Date: Fri, 6 Oct 2006 23:42:02 -0400
To: questions@freebsd.org
X-Mailer: VM 7.17 under 21.5  (beta27) "fiddleheads" XEmacs Lucid
X-Junkmail-Status: score=10/50, host=mr02.lnh.mail.rcn.net
X-Junkmail-SD-Raw: score=unknown,
	refid=str=0001.0A090203.452721AB.0017,ss=1,fgs=0,
	ip=207.172.4.11, so=2006-05-09 23:27:51,
	dmn=5.2.113/2006-07-26
Cc: 
Subject: ssh(d) "Failed keyboard-interactive/pam for invalid user"
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Oct 2006 03:41:43 -0000


	One of my machines running:

FreeBSD 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Thu Aug  3 15:33:32 EDT 2006

	has suddenly decided to deny all ssh connections, whether by
key-exchange or password.
	When attempting the latter, this appears in auth.log:

Oct  3 22:47:44 jerusalem sshd[46280]: error: PAM: authentication error for illegal user <deleted> from bronze.lcs.mit.edu
Oct  3 22:47:44 jerusalem sshd[46280]: Failed keyboard-interactive/pam for invalid user <deleted> from 128.31.0.11 port 63059 ssh2

	Thre's nothing relevant in /usr/src/UPDATING, and searching on
Google points to Samba-related stuff.  I am running Samba, but fail
to understand how this can affect a non-Samba-related login.
	Anyone willing to whap me with the clue-iron?


				Robert Huff