verification, cont [2/2]:
AFTER UPDATE (proposed enabled)
root@ephemeral-resolute-703:~# apt-cache policy openssh-server
openssh-server:
Installed: 1:10.2p1-2ubuntu3.3
Candidate: 1:10.2p1-2ubuntu3.3
Version table:
*** 1:10.2p1-2ubuntu3.3 100
100 http://archive.ubuntu.com/ubuntu resolute-proposed/main amd64
Packages
100 /var/lib/dpkg/status
1:10.2p1-2ubuntu3.2 500
500 http://archive.ubuntu.com/ubuntu resolute-updates/main amd64
Packages
500 http://security.ubuntu.com/ubuntu resolute-security/main amd64
Packages
1:10.2p1-2ubuntu3 500
500 http://archive.ubuntu.com/ubuntu resolute/main amd64 Packages
root@ephemeral-resolute-703:~# sh repro.sh
[again, skipping output of the installation step]
==> Ensuring local test account 'testdev'
User 'testdev' already exists.
BAD PASSWORD: The password is shorter than 8 characters
Password for 'testdev' is: testpw
==> Configuring /etc/nsswitch.conf
passwd: sss files
group: sss files
shadow: files
==> Configuring sshd + PAM
==> Writing /etc/sssd/sssd.conf
==> Starting services (sssd, ssh) via systemd
==> Waiting for SSSD to canonicalize 'testdev' -> 'testdev@proxytest'
OK: getent passwd testdev@proxytest ->
testdev@proxytest:x:1001:1001::/home/testdev:/bin/bash
Canonical pw_name short 'testdev': testdev@proxytest
==> Attempting verification login: ssh testdev@localhost
ssh client output:
Warning: Permanently added 'localhost' (ED25519) to the list of known hosts.
remote command output:
REPRO_LOGIN_OK
uid=1001(testdev@proxytest) gid=1001(testdev@proxytest)
groups=1001(testdev@proxytest)
==> sshd journal evidence (since 2026-07-09 12:46:29)
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: Accepted
keyboard-interactive/pam for testdev from 127.0.0.1 port 35406 ssh2
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: Postponed
keyboard-interactive/pam for testdev from 127.0.0.1 port 35406 ssh2 [preauth]
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
establishing credentials
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
initializing for "testdev" with service "sshd"
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM: num
PAM env strings 1
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
setting PAM_RHOST to "127.0.0.1"
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
setting PAM_TTY to "ssh"
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1:
auth2_challenge_start: trying authentication method 'pam' [preauth]
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1:
do_pam_account: called
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1:
kbdint_alloc: devices 'pam' [preauth]
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]: debug1:
monitor_child_preauth: user testdev authenticated by privileged process
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3954]:
pam_unix(sshd:session): session opened for user testdev(uid=1001) by (uid=0)
Jul 09 12:46:29 ephemeral-resolute-703 sshd-session[3956]: debug1:
do_pam_account: called
Jul 09 12:46:30 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
cleanup
Jul 09 12:46:30 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
closing session
Jul 09 12:46:30 ephemeral-resolute-703 sshd-session[3954]: debug1: PAM:
deleting credentials
Jul 09 12:46:30 ephemeral-resolute-703 sshd-session[3954]:
pam_unix(sshd:session): session closed for user testdev
Jul 09 12:46:30 ephemeral-resolute-703 sshd-session[4016]: debug1: PAM:
establishing credentials
==> VERDICT
openssh-server version : 1:10.2p1-2ubuntu3.3
ssh login outcome : success
mismatch journal line : <none>
RESULT: FIX CONFIRMED.
The same short-name login succeeded with no PAM consistency-check failure.
Verification successful.
** Tags removed: verification-needed-resolute
** Tags added: verification-done-resolute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2151817
Title:
SSSD incompatible with OpenSSH ≥10.1p1 PAM username consistency check
when using short names
To manage notifications about this bug go to:
https://bugs.launchpad.net/sssd/+bug/2151817/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
