From owner-freebsd-stable Mon Jun 11 10:21:16 2001 Delivered-To: freebsd-stable@freebsd.org Received: from cicero1.cybercity.dk (cicero1.cybercity.dk [212.242.40.4]) by hub.freebsd.org (Postfix) with ESMTP id 5828837B401 for ; Mon, 11 Jun 2001 10:21:10 -0700 (PDT) (envelope-from fj@batmule.dk) Received: from prefect.unknown.dk (dag.batmule.dk [212.242.86.227]) by cicero1.cybercity.dk (Postfix) with ESMTP id EBC8115FD98; Mon, 11 Jun 2001 19:21:07 +0200 (CEST) Received: (from fj@localhost) by prefect.unknown.dk (8.11.3/8.11.1) id f5BHL7p30463; Mon, 11 Jun 2001 19:21:07 +0200 (CEST) (envelope-from fj) From: Flemming Jacobsen Message-Id: <200106111721.f5BHL7p30463@prefect.unknown.dk> Subject: Re: Patch for PAM/ssh problem (was Re: sshd failing with: 'fatal: PAM setcred failed[6]: Permission denied') In-Reply-To: <200106111552.f5BFqAB20461@earth.backplane.com> from Matt Dillon at "Jun 11, 2001 8:52:10 am" To: dillon@earth.backplane.com (Matt Dillon) Date: Mon, 11 Jun 2001 19:21:07 +0200 (CEST) Cc: bsd@bsdhome.com, freebsd-stable@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Matt Dillon wrote: > :After updating yesterday from about a week before, sshd won't let > :me login, reporting: > : > : sshd[14238]: Accepted rsa for bsd from xx.xx.xx.xx port 1243 > : sshd[14238]: fatal: PAM setcred failed[6]: Permission denied > : > :My /etc/pam.conf is rev 1.6.2.6 and hasn't been changed. Also, > :my sshd_config file has not been altered either. I did a > :mergemaster as part of the update. > : > :This was working just fine about a week ago. Any ideas? > : > :Thanks, > :-Brian > > The below patch should temporarily solve the problem until the > bright boys that broke ssh and/or pam figure out the correct > fix. Patch the file in contrib as shown and then do: > [ ... ] A workaround which might be acceptable to some, is to authenticate using password, not the authentication agent. This works for me. Hyg' Flemming -- Flemming Jacobsen Email: fj@batmule.dk ---=== If speed kills, Windows users may live forever. ===--- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message