I am doing a test install of openssh v2.3.0 on my linux desktop.
I'm not sure what version of RH I'm running, but it is running PAM.
I can build cleanly and start the daemon, but when i telnet from the
desktop to itself, as user operator, I just can't authenticate,
and I'm not clear why. Here is relevant msg from /var/log/messages:
Feb 19 16:29:46 myhost sshd[4192]: Failed password for operator from
12.34.56.78 port 661
Feb 19 16:29:52 myhost last message repeated 2 times
Feb 19 16:29:52 myhost sshd[4192]: Connection closed by 12.34.56.78
Feb 19 16:29:52 myhost sshd[4192]: Cannot close PAM session[4]: System error
Here's the contents of my pam.d/ssh file - it is almost identical to
the sshd.pam.generic file supplied:
[root@wukon pam.d]# more ssh
#%PAM-1.0
auth required /lib/security/pam_pwdb.so shadow
auth required /lib/security/pam_nologin.so
account required /lib/security/pam_pwdb.so
password required /lib/security/pam_cracklib.so
password required /lib/security/pam_pwdb.so shadow nullok use_authtok
session required /lib/security/pam_pwdb.so
I'm trying the password that's in the /etc/passwd file, to no avail,
messages are always:
operator@myhost's password:
Permission denied, please try again.
operator@myhost's password:
Permission denied, please try again.
operator@myhost's password:
Permission denied.
Forgive me if this is obvious, I searched the archives but nothing helped.
TIA for any help you can give!!
Regards;
Judith Reed
[EMAIL PROTECTED]
----------------------------------------------------------------------
Here's my sshd_config file:
# This is ssh server systemwide configuration file.
Port 22
#Protocol 2,1
ListenAddress 0.0.0.0
#ListenAddress ::
HostKey /usr/local/openssh/etc/ssh_host_key
ServerKeyBits 768
LoginGraceTime 600
KeyRegenerationInterval 3600
PermitRootLogin yes
#
# Don't read ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes
StrictModes yes
X11Forwarding no
X11DisplayOffset 10
PrintMotd yes
KeepAlive yes
# Logging
SyslogFacility AUTH
LogLevel INFO
#obsoletes QuietMode and FascistLogging
RhostsAuthentication no
#
# For this to work you will also need host keys in
/usr/local/openssh/etc/ssh_known_h
osts
RhostsRSAAuthentication no
#
RSAAuthentication yes
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication yes
PermitEmptyPasswords no
# Uncomment to disable s/key passwords
#SkeyAuthentication no
#KbdInteractiveAuthentication yes
# To change Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#AFSTokenPassing no
#KerberosTicketCleanup no
# Kerberos TGT Passing does only work with the AFS kaserver
#KerberosTgtPassing yes
CheckMail no
#UseLogin no
# Uncomment if you want to enable sftp
#Subsystem sftp /usr/local/openssh/libexec/sftp-server
#MaxStartups 10:30:60
