From owner-freebsd-security Sat Aug 4 11:53: 9 2001 Delivered-To: freebsd-security@freebsd.org Received: from ringworld.nanolink.com (unknown [217.75.135.248]) by hub.freebsd.org (Postfix) with SMTP id EDE0D37B401 for ; Sat, 4 Aug 2001 11:53:03 -0700 (PDT) (envelope-from roam@ringlet.net) Received: (qmail 68039 invoked by uid 1000); 4 Aug 2001 18:51:36 -0000 Date: Sat, 4 Aug 2001 21:51:36 +0300 From: Peter Pentchev To: Artur Meski Cc: freebsd-security@freebsd.org Subject: Re: PAM - pam_chauthtok - 'Password expiry..' Message-ID: <20010804215136.B565@ringworld.oblivion.bg> Mail-Followup-To: Artur Meski , freebsd-security@freebsd.org References: <20010804200317.A89175@rapid.black.pl> <20010804213402.A565@ringworld.oblivion.bg> <20010804203853.A89377@rapid.black.pl> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010804203853.A89377@rapid.black.pl>; from erph@freebsd.net.pl on Sat, Aug 04, 2001 at 08:38:53PM +0200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, Aug 04, 2001 at 08:38:53PM +0200, Artur Meski wrote: > > What is the output of 'fgrep sshd /etc/pam.conf'? > > sshd auth sufficient pam_skey.so > #sshd auth sufficient pam_kerberosIV.so try_first_pass > sshd auth required pam_unix.so try_first_pass > sshd session required pam_permit.so > # "csshd" is for challenge-based authentication with sshd (TIS auth, etc.) > csshd auth required pam_skey.so OK; can you try adding a line saying: sshd password required pam_permit.so ..and see if it works? If it still gives the same error message, try replacing 'password' with 'account'. If it *still* doesn't work, that would be weird. G'luck, Peter -- If there were no counterfactuals, this sentence would not have been paradoxical. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message