Re: Expired Password using Pam and openssh

[Darryl Cook <dlc@xxxxxxxxxxxxxxx>]

Well after doing some experiments it looks like Ethan is right.....sshd works
fine now with Pam as long as Privilige Seperation is turned off.  When its
turned on it wont work with an expired password.  I havent tried the daily
snapshot yet though.....

thanks for the responses!
darryl

Jan Rekorajski wrote:
> On Fri, 06 Feb 2004, Ethan Benson wrote:
>
> > On Fri, Feb 06, 2004 at 10:49:00AM -0500, Darryl Cook wrote:
> > > I am trying to set sshd up to use pam with moderate success.  I can get 
> > > pam to allow users to login just fine.  The problem is when their 
> > > password is expired.  I have messed with it for about 2 solid days now 
> > > reading all the archives I can find but to no avail.  When the password 
> > > is expired, it asks for the current password and then asks for the new 
> > > password.   I enter the new password and it then just crashes.  Ill post 
> > > /var/log/messages and other info below.
> > >
> > > platform :   Redhat 9
> > > sshd:          version 3.7.1p2
> > >     
> > this version of ssh has broken pam support.
> >   
>
> That's interresting, do you mean this version of openssh or
> this version of openssh from redhat? Because it works for me without any
> problems (no redhat here).
>
> > try the latest daily snapshot, pam works reasonably well with it,
> > password expiration works correctly even with PrivSep == YES
> >   
>
> Glad to hear it, but I must see this with my own eyes ;)
> Forgive my luck of trust byt I spent a lot of time fixing
> every version of ssh to work with pam.
>
> Jan