From owner-freebsd-hackers  Sat May 12 16:49: 7 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from mark9.vladsempire.net (hutch-1061.hutchtel.net [206.10.69.61])
	by hub.freebsd.org (Postfix) with ESMTP id 7350937B423
	for <hackers@FreeBSD.ORG>; Sat, 12 May 2001 16:49:04 -0700 (PDT)
	(envelope-from jpaetzel@hutchtel.net)
Received: from mark9.vladsempire.net (mark9.vladsempire.net [10.0.0.97])
	by mark9.vladsempire.net (Postfix) with SMTP
	id B299629F; Sat, 12 May 2001 18:54:16 -0500 (CDT)
Content-Type: text/plain;
  charset="iso-8859-1"
From: Josh Paetzel <jpaetzel@hutchtel.net>
To: Terry Lambert <tlambert2@mindspring.com>
Subject: Re: SSH Must Die
Date: Sat, 12 May 2001 18:54:16 -0500
X-Mailer: KMail [version 1.2]
Cc: hackers@FreeBSD.ORG
References: <3AFD1D6D.51731EAC@mindspring.com> <01051208053600.00484@mark9.vladsempire.net> <3AFDC9FF.3854EBC2@mindspring.com>
In-Reply-To: <3AFDC9FF.3854EBC2@mindspring.com>
MIME-Version: 1.0
Message-Id: <01051218541602.03957@mark9.vladsempire.net>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Saturday 12 May 2001 18:40, Terry Lambert wrote:
> j wrote:
> > On Saturday 12 May 2001 06:24, Terry Lambert wrote:
> > > This whole ssh B.S. is very annoying.
> > >
> > > After an upgrade from 4.2 to 4.3 using a CDROM boot plus
> > > upgrade menu option, SSH stops working, for no good reason
> > > (_any_ reason is no good).
> >
> > You did make the needed additions to /etc/pam.conf, didn't you?
>
> What additions are necessary between 4.2 and 4.3?  I was
> under the impression that "sysinstall" was supposed to
> "just do the right thing, and don't hassle me"?
>
> If you have a dead chicken I should wave over my keyboard,
> hand it over!  8-).

Make sure you have these lines in /etc/pam.conf
sshd	auth	sufficient	pam_skey.so
sshd	auth	required	pam_unix.so	try_first_pass
sshd	session	required	pam_permit.so

These lines are not in 4.2-rel and they are needed in 4.3-rel.

Have fun.
Josh


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message