Date: Tue, 10 Sep 2002 08:24:25 -0700 (PDT) From: FLAMENT <ludovic.flament@netasq.com> To: freebsd-gnats-submit@FreeBSD.org Subject: i386/42641: Pam SSH authentication don't work Message-ID: <200209101524.g8AFOP8D019338@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 42641
>Category: i386
>Synopsis: Pam SSH authentication don't work
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Sep 10 08:30:03 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator: FLAMENT
>Release: FreeBSD 4.6.2-RELEASE
>Organization:
NETASQ
>Environment:
FreeBSD 4.6.2-RELEASE FreeBSD 4.6.2-RELEASE #1: Mon Sep 2 17:30:16 CEST 2002 root@:/usr/src/sys/compile/SMP i386
>Description:
The pam-ssh don't work. It is impossible to invoke the authentification when we add pam_ssh.so in /etc/pam.conf :
This is my /etc/pam.conf :
login auth required pam_ssh.so no_warn try_first_pass
login account required pam_unix.so try_first_pass
login password required pam_permit.so
login session required pam_permit.so
This is the progression of problems with pam-ssh :
- FreeBSD 4.5 : ok.
- FreeBSD 4.6 : when we login with a bad password, you don't have an other chance to authenticate (Crtl+D is only solution to reinit login and permit an other login).
- FreeBSD 4.6.2 : impossible to invoke the authentification.
>How-To-Repeat:
Use this configuration for /etc/pam.conf file and try to login. You see that the UNIX authentication is directly use, not the pam-ssh authentication:
login auth required pam_ssh.so no_warn try_first_pass
login account required pam_unix.so try_first_pass
login password required pam_permit.so
login session required pam_permit.so
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209101524.g8AFOP8D019338>