First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 65343
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Daniel Ahlberg (RETIRED) <aliz@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Ulrich Müller <ulm@gentoo.org>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
openssh.patch patch for auth2-chall.c patch Ulrich Müller 2004-09-25 12:59 0000 590 bytes Details | Diff
log Debug output from server log for case B text/plain Ulrich Müller 2004-09-25 15:59 0000 1.55 KB Details
openssh.patch proposed patch for auth2-chall.c patch Ulrich Müller 2004-09-26 08:48 0000 679 bytes Details | Diff
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 65343 depends on: Show dependency tree
Bug 65343 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2004-09-25 12:53 0000 
openssh-3.9_p1 behaves differently if PAM is switched off either during compile
time (see "A" below) or via configuration file (see "B" below).

Common configuration in both cases in /etc/ssh/sshd_config:
   PasswordAuthentication no
   #UsePAM no
(All other lines in the file are as installed by the package.)

app-admin/skey is installed and configured.

Steps to Reproduce "A":
1. Unset "pam" useflag
2. emerge openssh, restart sshd
3. ssh from remote machine

Actual Results "A":
Behaviour is as expected:
   $ ssh user@host
   otp-md5 89 foo1234567
   S/Key Password: 
   [... login succeeds]

Steps to Reproduce "B":
1. Set "pam" useflag
2. emerge openssh, restart sshd
3. ssh from remote machine

Actual Results "B":
No password prompt appears and login is immediately refused:
   $ ssh user@host
   Permission denied (publickey,keyboard-interactive).
   $ 

Expected Results:
The behaviour of sshd should be identical in cases A and B (and should be as in
case A).

------- Comment #1 From Ulrich Müller 2004-09-25 12:59:29 0000 ------- 
Created an attachment (id=40404) [details]
patch for auth2-chall.c

Throughout the openssh source, "#ifdef USE_PAM" is always followed by "if
(options.use_pam)", except for this one case in function
privsep_challenge_enable.

------- Comment #2 From Ulrich Müller 2004-09-25 15:59:18 0000 ------- 
Created an attachment (id=40414) [details]
Debug output from server log for case B

The last lines of the "sshd -ddd" log show output from sshpam_init_ctx, in
spite of UsePAM being switched off.

------- Comment #3 From Ulrich Müller 2004-09-26 08:48:54 0000 ------- 
Created an attachment (id=40456) [details]
proposed patch for auth2-chall.c

------- Comment #4 From Ulrich Müller 2005-01-20 04:16:55 0000 ------- 
Please note that this bug is fixed by upstream. See URL.

------- Comment #5 From Daniel Ahlberg (RETIRED) 2005-01-22 07:57:01 0000 ------- 
Commited, thanks!
First Last Prev Next    No search results available      Search page      Enter new bug