Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 08 Jan 2004 16:50:51 -0800
From:      Sean McNeil <sean@mcneil.com>
To:        Dag-Erling =?ISO-8859-1?Q?Sm=F8rgrav?= <des@des.no>
Cc:        freebsd-current@freebsd.org
Subject:   Re: ssh not working for me anymore
Message-ID:  <1073609451.1590.5.camel@server.mcneil.com>
In-Reply-To: <xzp8yki2i3i.fsf@dwp.des.no>
References:  <1073588140.92541.2.camel@server.mcneil.com> <xzp8yki2i3i.fsf@dwp.des.no>

next in thread | previous in thread | raw e-mail | index | archive | help
Still doesn't work:

[sean@server sean]$ ssh -V
OpenSSH_3.7.1p2 FreeBSD-20040106, SSH protocols 1.5/2.0, OpenSSL 0.9.7c
30 Sep 2003

If I try with a user in the /etc/passwd file, all is fine.  If I try
with a user in LDAP, no joy.

Jan  8 14:33:47 server sshd[1052]: Failed password for sean from
66.75.176.109 port 51302 ssh2

login, gdm, xscreensaver+PAM_patch all work fine yet sshd doesn't any
longer.  My /etc/pam.d/sshd file looks like:

#
# $FreeBSD: src/etc/pam.d/sshd,v 1.15 2003/04/30 21:57:54 markm Exp $
#
# PAM configuration for the "sshd" service
#

# auth
auth		required	pam_nologin.so		no_warn
auth		sufficient	pam_opie.so		no_warn no_fake_prompts
auth		requisite	pam_opieaccess.so	no_warn allow_local
#auth		sufficient	pam_krb5.so		no_warn try_first_pass
#auth		sufficient	pam_ssh.so		no_warn try_first_pass
auth		include		ldap
auth		required	pam_unix.so		no_warn try_first_pass

# account
#account 	required	pam_krb5.so
account		sufficient	/usr/local/lib/pam_ldap.so no_warn try_first_pass
account		required	pam_login_access.so
account		required	pam_unix.so

# session
#session 	optional	pam_ssh.so
session		required	pam_permit.so

# password
#password	sufficient	pam_krb5.so		no_warn try_first_pass
password	required	pam_unix.so		no_warn try_first_pass

ldap:

auth	sufficient	/usr/local/lib/pam_ldap.so no_warn try_first_pass

Cheers,
Sean

On Thu, 2004-01-08 at 14:25, Dag-Erling Smørgrav wrote:
> Sean McNeil <sean@mcneil.com> writes:
> > I think ssh is no longer compiled/configured the same (??) I'm using
> > ldap and had no trouble until the recent merge of the openssl/openssh
> > stuff.  Is there a missing --with-md5-passwords or something?
> 
> We've never built OpenSSH with --with-md5-passwords.
> 
> Could you try to cvsup and rebuild, and get back to me if it still
> doesn't work?
> 
> DES



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1073609451.1590.5.camel>