OpenSSH
[Top] [All Lists]

Re: What would cause keyboard-interactive packet connection close

To: dtucker@zip.com.au (Darren Tucker)
Subject: Re: What would cause keyboard-interactive packet connection close
From: "Tuc at T-B-O-H.NET" <ml@t-b-o-h.net>
Date: Wed, 28 Feb 2007 21:28:38 -0500 (EST)
Cc: openssh-unix-dev@mindrot.org, "Tuc at T-B-O-H.NET" <ml@t-b-o-h.net>
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <45E637C9.3090503@zip.com.au>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
> 
> Tuc at T-B-O-H.NET wrote:
> [...]
> >     FreeBSD 5.X (I don't remember off hand) and it identifies
> > as :
> > 
> > OpenSSH_3.5p1 FreeBSD-20030924, SSH protocols 1.5/2.0, OpenSSL 0x0090704f
> 
> The client-side debug that you posted looks like sshd is either crashing 
> or killing the connection during keyboard-interactive authentication. 
> The problem may lie in sshd or in one of the PAM modules that it's 
> configured to use.
>
        It should be :

auth            required        pam_nologin.so          no_warn
auth            sufficient      pam_opie.so             no_warn no_fake_prompts
auth            requisite       pam_opieaccess.so       no_warn allow_local
auth            required        pam_unix.so             no_warn try_first_pass

account         required        pam_login_access.so
account         required        pam_unix.so

session         required        pam_permit.so

password        required        pam_unix.so             no_warn try_first_pass 

        That seems to be the default on the client side, and I know I
didn't change it on the server side.
>
> You can try forcing password auth ("ssh -o 
> PreferredAuthentications=password yourserver") which may work around the 
> problem, but it's dependent on your server's configuration.
>
        :( It claims :

debug1: authentications that can continue: publickey,keyboard-interactive
debug3: start over, passed a different list publickey,keyboard-interactive
debug3: preferred password
debug1: no more auth methods to try
Permission denied (publickey,keyboard-interactive).
> 
> If you can get on to the server you could check the syslog or, better 
> yet, run sshd in debug mode to give you a much better idea of what's 
> going on.
>
        If I could, yea. Unfortunately just not able to due to other
circumstances. 

> Anyway I'm pretty sure FreeBSD had their own keyboard-interactive code 
> in versions of that vintage to support PAM so it's unlikely that we will 
> be able to help you.  You probably need to seek help from the FreeBSD folks.
> 
        Ok, thanks.

                        Tuc
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

<Prev in Thread] Current Thread [Next in Thread>