Date: Sun, 4 Aug 2002 13:24:15 -0500 (CDT) From: Stephen Cravey <cravey@gotbrains.org> To: FreeBSD-gnats-submit@FreeBSD.org Subject: bin/41327: skey decrementing but not authorizing with ssh Message-ID: <200208041824.g74IOFWW035902@www.gotbrains.org>
next in thread | raw e-mail | index | archive | help
>Number: 41327 >Category: bin >Synopsis: skey decrementing but not authorizing with ssh >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 04 11:30:00 PDT 2002 >Closed-Date: >Last-Modified: >Originator: Stephen Cravey >Release: FreeBSD 4.6.1-RELEASE-p7 i386 >Organization: >Environment: System: FreeBSD ************* 4.6.1-RELEASE-p7 FreeBSD 4.6.1-RELEASE-p7 #0: Fri Aug 2 18:21:23 CDT 2002 cravey@***********/usr/obj/usr/src/sys/********* i386 >Description: After upgrading to 4.6.1, an attempt to ssh into the machine (ssh localhost) is met with problems. When you enter an incorrect skey password, a permission denied error is displayed as it should and the skey sequence number stays the sanme. When a CORRECT skey password is entered, permission is denied and the skey sequence number is DECREMENTED. I'm using the default pam.conf from the 4.6.1 p7 install. (Yes I ran mergemaster, yes I rebooted) This presents a problem because you cannot use skey for ssh logins and the sequence # will continue to decrement until it goes negative. Yes, it goes down to '-1'. This may or may not be another problem. Logins can still be made with your normal password, but that's not useful if you're using a system that logs keystrokes. >How-To-Repeat: run keyinit run key attempt to ssh into the machine cravey:~ $ ssh localhost s/key 94 ww09087 Password: Permission denied, please try again. s/key 93 ww09087 Password: Permission denied, please try again. s/key 92 ww09087 Password: cravey@localhost's password: >Fix: Use telnet, but that kindof defeats the whole purpose, doesn't it. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200208041824.g74IOFWW035902>