From owner-freebsd-stable Wed Jan 31 12:59:30 2001 Delivered-To: freebsd-stable@freebsd.org Received: from www.golsyd.net.au (golsyd.net.au [203.57.20.1]) by hub.freebsd.org (Postfix) with ESMTP id 9E27037B65D for ; Wed, 31 Jan 2001 12:59:12 -0800 (PST) Received: from [203.164.12.28] by www.quake.com.au (NTMail 4.30.0012/AB6169.63.5724aadf) with ESMTP id jnaaaaaa for ; Thu, 1 Feb 2001 07:58:33 +1100 Message-ID: <3A787CB9.864E381E@quake.com.au> Date: Thu, 01 Feb 2001 07:59:37 +1100 From: Kal Torak X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Pete French Cc: stable@freebsd.org Subject: Re: ssh problem upgrading to 4.2-stable References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Pete French wrote: > > So, yesterday we upgraded the last machine running 3.5 here to 4.2 stable > (CVSuped on saturday I believe). All went very smoothly and everything runs > fine except for ssh. We are using openssh, and it rejects peoples > passwords with "Permission denied, please try again." > > I seem to recall reading that password encryptionc hanged from MD5 to DES > between 3.x and 4.x - and I suspect this could be the problem. The > /usr/lib/libcrypt.so file is a link to libdescrypt.so, so I assume > we are now using DES passwords. Old users have MD5 passwords, but new > users are created with DES passwords. Using 'passwd' however converts them > to MD5. I have checked auth.conf, mailing list archives and done a web > search and am running out of ideas. Well besides the problem with /etc/pam.conf if you didnt install the new one, you can choose what password format you want use in /etc/login.conf by using the line passwd_format=md5 or des... Also as a side note, the des libs understand both des and md5 crypts, but the md5 libs only understand md5 crypt... Good luck! Kal. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message