From owner-freebsd-bugs Sun Aug 4 11:30: 8 2002 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 409CA37B400 for ; Sun, 4 Aug 2002 11:30:02 -0700 (PDT) Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 97F8843E4A for ; Sun, 4 Aug 2002 11:30:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g74IU1JU091052 for ; Sun, 4 Aug 2002 11:30:01 -0700 (PDT) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g74IU1KU091051; Sun, 4 Aug 2002 11:30:01 -0700 (PDT) Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0C1E037B446 for ; Sun, 4 Aug 2002 11:24:18 -0700 (PDT) Received: from www.gotbrains.org (www2.gotbrains.org [206.180.149.129]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E90E43E65 for ; Sun, 4 Aug 2002 11:24:17 -0700 (PDT) (envelope-from cravey@www.gotbrains.org) Received: from www.gotbrains.org (localhost [127.0.0.1]) by www.gotbrains.org (8.12.3/8.12.3) with ESMTP id g74IOFo9035903 for ; Sun, 4 Aug 2002 13:24:15 -0500 (CDT) (envelope-from cravey@www.gotbrains.org) Received: (from cravey@localhost) by www.gotbrains.org (8.12.3/8.12.3/Submit) id g74IOFWW035902; Sun, 4 Aug 2002 13:24:15 -0500 (CDT) Message-Id: <200208041824.g74IOFWW035902@www.gotbrains.org> Date: Sun, 4 Aug 2002 13:24:15 -0500 (CDT) From: Stephen Cravey Reply-To: Stephen Cravey To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: bin/41327: skey decrementing but not authorizing with ssh Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 41327 >Category: bin >Synopsis: skey decrementing but not authorizing with ssh >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 04 11:30:00 PDT 2002 >Closed-Date: >Last-Modified: >Originator: Stephen Cravey >Release: FreeBSD 4.6.1-RELEASE-p7 i386 >Organization: >Environment: System: FreeBSD ************* 4.6.1-RELEASE-p7 FreeBSD 4.6.1-RELEASE-p7 #0: Fri Aug 2 18:21:23 CDT 2002 cravey@***********/usr/obj/usr/src/sys/********* i386 >Description: After upgrading to 4.6.1, an attempt to ssh into the machine (ssh localhost) is met with problems. When you enter an incorrect skey password, a permission denied error is displayed as it should and the skey sequence number stays the sanme. When a CORRECT skey password is entered, permission is denied and the skey sequence number is DECREMENTED. I'm using the default pam.conf from the 4.6.1 p7 install. (Yes I ran mergemaster, yes I rebooted) This presents a problem because you cannot use skey for ssh logins and the sequence # will continue to decrement until it goes negative. Yes, it goes down to '-1'. This may or may not be another problem. Logins can still be made with your normal password, but that's not useful if you're using a system that logs keystrokes. >How-To-Repeat: run keyinit run key attempt to ssh into the machine cravey:~ $ ssh localhost s/key 94 ww09087 Password: Permission denied, please try again. s/key 93 ww09087 Password: Permission denied, please try again. s/key 92 ww09087 Password: cravey@localhost's password: >Fix: Use telnet, but that kindof defeats the whole purpose, doesn't it. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message