From owner-freebsd-stable Wed Jan 31 4:58:37 2001 Delivered-To: freebsd-stable@freebsd.org Received: from shiva.jussieu.fr (shiva.jussieu.fr [134.157.0.129]) by hub.freebsd.org (Postfix) with ESMTP id 2854437B6B9 for ; Wed, 31 Jan 2001 04:58:17 -0800 (PST) Received: from parthe.lpthe.jussieu.fr (parthe.lpthe.jussieu.fr [134.157.10.1]) by shiva.jussieu.fr (8.10.0/jtpda-5.3.3) with ESMTP id f0VCwEq06359 for ; Wed, 31 Jan 2001 13:58:14 +0100 (CET) Received: from rose.lpthe.jussieu.fr (root@[134.157.10.102]) by parthe.lpthe.jussieu.fr (8.11.1/jtpda-5.3.1) with ESMTP id f0VCwC327590 for ; Wed, 31 Jan 2001 13:58:13 +0100 (MET) Received: (from michel@localhost) by rose.lpthe.jussieu.fr (8.11.1/8.11.1) id f0VCwDt00521 for stable@FreeBSD.ORG; Wed, 31 Jan 2001 13:58:13 +0100 (CET) (envelope-from michel) Date: Wed, 31 Jan 2001 13:58:13 +0100 From: Michel Talon To: stable@FreeBSD.ORG Subject: Re: ssh problem upgrading to 4.2-stable Message-ID: <20010131135813.A484@lpthe.jussieu.fr> Mail-Followup-To: stable@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre2i In-Reply-To: Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Jan 31, 2001 at 11:41:14AM +0000, Pete French wrote: > So, yesterday we upgraded the last machine running 3.5 here to 4.2 stable > (CVSuped on saturday I believe). All went very smoothly and everything runs > fine except for ssh. We are using openssh, and it rejects peoples > passwords with "Permission denied, please try again." > > I seem to recall reading that password encryptionc hanged from MD5 to DES > between 3.x and 4.x - and I suspect this could be the problem. The > /usr/lib/libcrypt.so file is a link to libdescrypt.so, so I assume > we are now using DES passwords. Old users have MD5 passwords, but new > users are created with DES passwords. Using 'passwd' however converts them > to MD5. I have checked auth.conf, mailing list archives and done a web > search and am running out of ideas. > There is an issue with /etc/pam.conf. You can overwrite it with the one under /usr/src. This worked for me. Also there is another pithole (i fell into): sshd dies because there is an obsolete option in /etc/ssh/sshd_config, that you need to remove. ConnectionsPerPeriod 5/10 > Am I barking up the wrong tree entirely here ? > > -pete. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message -- Michel Talon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message