From cravey@www.gotbrains.org Sun Aug 4 11:24:21 2002 Return-Path: Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0C1E037B446 for ; Sun, 4 Aug 2002 11:24:18 -0700 (PDT) Received: from www.gotbrains.org (www2.gotbrains.org [206.180.149.129]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E90E43E65 for ; Sun, 4 Aug 2002 11:24:17 -0700 (PDT) (envelope-from cravey@www.gotbrains.org) Received: from www.gotbrains.org (localhost [127.0.0.1]) by www.gotbrains.org (8.12.3/8.12.3) with ESMTP id g74IOFo9035903 for ; Sun, 4 Aug 2002 13:24:15 -0500 (CDT) (envelope-from cravey@www.gotbrains.org) Received: (from cravey@localhost) by www.gotbrains.org (8.12.3/8.12.3/Submit) id g74IOFWW035902; Sun, 4 Aug 2002 13:24:15 -0500 (CDT) Message-Id: <200208041824.g74IOFWW035902@www.gotbrains.org> Date: Sun, 4 Aug 2002 13:24:15 -0500 (CDT) From: Stephen Cravey Reply-To: Stephen Cravey To: FreeBSD-gnats-submit@freebsd.org Cc: Subject: skey decrementing but not authorizing with ssh X-Send-Pr-Version: 3.113 X-GNATS-Notify: >Number: 41327 >Category: bin >Synopsis: skey decrementing but not authorizing with ssh >Confidential: no >Severity: serious >Priority: high >Responsible: jon >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 04 11:30:00 PDT 2002 >Closed-Date: Tue Aug 30 10:14:06 GMT 2005 >Last-Modified: Tue Aug 30 10:14:06 GMT 2005 >Originator: Stephen Cravey >Release: FreeBSD 4.6.1-RELEASE-p7 i386 >Organization: >Environment: System: FreeBSD ************* 4.6.1-RELEASE-p7 FreeBSD 4.6.1-RELEASE-p7 #0: Fri Aug 2 18:21:23 CDT 2002 cravey@***********/usr/obj/usr/src/sys/********* i386 >Description: After upgrading to 4.6.1, an attempt to ssh into the machine (ssh localhost) is met with problems. When you enter an incorrect skey password, a permission denied error is displayed as it should and the skey sequence number stays the sanme. When a CORRECT skey password is entered, permission is denied and the skey sequence number is DECREMENTED. I'm using the default pam.conf from the 4.6.1 p7 install. (Yes I ran mergemaster, yes I rebooted) This presents a problem because you cannot use skey for ssh logins and the sequence # will continue to decrement until it goes negative. Yes, it goes down to '-1'. This may or may not be another problem. Logins can still be made with your normal password, but that's not useful if you're using a system that logs keystrokes. >How-To-Repeat: run keyinit run key attempt to ssh into the machine cravey:~ $ ssh localhost s/key 94 ww09087 Password: Permission denied, please try again. s/key 93 ww09087 Password: Permission denied, please try again. s/key 92 ww09087 Password: cravey@localhost's password: >Fix: Use telnet, but that kindof defeats the whole purpose, doesn't it. >Release-Note: >Audit-Trail: State-Changed-From-To: open->feedback State-Changed-By: jon State-Changed-When: Mon Aug 12 11:14:02 PDT 2002 State-Changed-Why: awaiting user feedback Responsible-Changed-From-To: freebsd-bugs->jon Responsible-Changed-By: jon Responsible-Changed-When: Mon Aug 12 11:14:02 PDT 2002 Responsible-Changed-Why: awaiting user feedback http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 State-Changed-From-To: feedback->feedback timeout State-Changed-By: matteo State-Changed-When: Tue Aug 30 10:13:30 GMT 2005 State-Changed-Why: http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 State-Changed-From-To: feedback->closed State-Changed-By: matteo State-Changed-When: Tue Aug 30 10:13:51 GMT 2005 State-Changed-Why: feedback timeout http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 >Unformatted: