From owner-freebsd-questions  Mon Feb  5 10:47:56 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from wasp.eng.ufl.edu (wasp.eng.ufl.edu [128.227.116.1])
	by hub.freebsd.org (Postfix) with ESMTP id 5EF8937B401
	for <questions@freebsd.org>; Mon,  5 Feb 2001 10:47:38 -0800 (PST)
Received: from eng.ufl.edu (scanner.engnet.ufl.edu [128.227.152.221])
	by wasp.eng.ufl.edu (8.9.3/8.9.3) with ESMTP id NAA14530;
	Mon, 5 Feb 2001 13:47:20 -0500 (EST)
Message-ID: <3A7EF534.8D3A1354@eng.ufl.edu>
Date: Mon, 05 Feb 2001 13:47:16 -0500
From: Bob Johnson <bob@eng.ufl.edu>
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: en, eo
MIME-Version: 1.0
To: andreas@kpnqwest.no
Cc: questions@freebsd.org
Subject: Re: sshd[11456]: fatal: PAM session setup
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> 
> Date: Mon, 05 Feb 2001 10:08:33 +0100
> From: Andreas Wideroe Andersen <andreas@kpnqwest.no>
> Subject: Re: sshd[11456]: fatal: PAM session setup
> 
> At 21:54 05.02.01 +1300, Juha Saarinen wrote:
> >Did you remember to do 'mergemaster' to sort out your config files after
> >the upgrade?
> >
> 
> Don't think it has anything to do with that, have tested without results.=20
> The thing is the latest sshd uses PAM for authetication, something that=20
> doesn't work 100% well always (according to someone I spoke to).. I could=20
> just compile up ssh without PAM support, but I cannot locate the correct=20
> Makefile and which line I should comment out in that case.
> 

It has everything to do with it.  You must update your 
/etc/pam.conf file so it has entries for sshd.  If you don't, 
you will get exactly the error messages you report.

Running mergemaster will semi-automate this (and other 
config file updates) for you.  If you insist on doing it 
manually, try

sshd     auth     sufficient     pam_skey.so
sshd     auth     required       pam_unix.so     try_first_pass
sshd     session  required       pam_permit.so

which you should find in /usr/src/etc/pam.conf

- Bob

> /Andreas
> 
> >Don
> >
> >On Mon, 5 Feb 2001, Andreas Wideroe Andersen wrote:
> >
> > > I just upgraded my system from FreeBSD 4.1 Stable to 4.2 Stable. After
> > > making world and compiling a new Kernel I was unable to ssh into the
> > > machine. However, it was no problem to ssh out!
> > >
> > > Here is my error message when ssh'ing to localhost:
> > >
> > > Feb 5 09:10:04 killah sshd[11456]: no modules loaded for `sshd' service
> > > Feb 5 09:10:04 killah sshd[11456]: no modules loaded for `sshd' service
> > > Feb 5 09:10:04 killah sshd[11456]: fatal: PAM session setup
> > > failed[6]: Permission denied
> > > Feb 5 09:10:04 killah sshd[11456]: fatal: PAM session setup
> > > failed[6]: Permission denied
> > > Feb 5 09:10:04 killah sshd[11456]: no modules loaded for `sshd' service
> > > Feb 5 09:10:04 killah sshd[11456]: no modules loaded for `sshd' service
> > > Connection to killah.mydomain.com closed by remote host.
> > >
> > > Can anyone help me out with this problem?
> > >
> > > Thanks,
> > > Andreas
> > >
> > >


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message