[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#165373: marked as done (libc6: cannot login using ssh)



Your message dated Sun, 20 Oct 2002 15:16:25 +0900
with message-id <80n0p9vdmu.wl@oris.opensource.jp>
and subject line Bug#165373: libc6: cannot login using ssh
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Oct 2002 15:56:01 +0000
>From arthur@tiefighter.et.tudelft.nl Fri Oct 18 10:56:00 2002
Return-path: <arthur@tiefighter.et.tudelft.nl>
Received: from ch.its.tudelft.nl [130.161.156.139] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 182ZTk-0005cx-00; Fri, 18 Oct 2002 10:56:00 -0500
Received: from localhost (localhost [127.0.0.1])
	by ch.its.tudelft.nl (Postfix) with SMTP id D078D3DAF
	for <submit@bugs.debian.org>; Fri, 18 Oct 2002 17:55:59 +0200 (CEST)
Received: by ch.its.tudelft.nl (Postfix, from userid 539)
	id A75503DF3; Fri, 18 Oct 2002 17:55:59 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by ch.its.tudelft.nl (Postfix) with ESMTP id A441A3DAF
	for <submit@bugs.debian.org>; Fri, 18 Oct 2002 17:55:59 +0200 (CEST)
Date: Fri, 18 Oct 2002 17:55:59 +0200 (CEST)
From: Arthur de Jong <arthur@tiefighter.et.tudelft.nl>
X-X-Sender: arthur@ch.its.tudelft.nl
To: submit@bugs.debian.org
Subject: libc6: cannot login using ssh
Message-ID: <[🔎] Pine.LNX.4.44.0210181755130.1846-100000@ch.its.tudelft.nl>
X-Message: You should consider getting a real Email client
X-Message-Flag: You should consider getting a real Email client
X-WebTV-Stationery: Standard; BGColor=black; TextColor=black
X-Fnord: +++ath
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-1.2 required=5.0
	tests=SPAM_PHRASE_00_01,USER_AGENT_PINE
	version=2.41
X-Spam-Level: 


Subject: libc6: cannot login using ssh
Package: libc6
Version: 2.3.1-1
Severity: normal
Tags: sid

This problem is introduced when using libc6_2.3.1-1_i386.deb, when reinstalling
libc6_2.2.5-15_i386.deb the problem goes away.

When I try to login from a remote (woody) host to a sid host:
% ssh spiritus
Connection to spiritus closed by remote host.
Connection to spiritus closed.

The relevant output of ssh -v spiritus (spiritus runs sid):
...
debug1: try pubkey: /home/arthur/.ssh/id_rsa
debug1: input_userauth_pk_ok: pkalg ssh-rsa blen 149 lastkey 0x80918b0 hint 0
debug1: read PEM private key done: type RSA
debug1: ssh-userauth2 successful: method publickey
debug1: channel 0: new [client-session]
debug1: send channel open 0
debug1: Entering interactive session.
debug1: channel_free: channel 0: client-session, nchannels 1
Connection to spiritus closed by remote host.
Connection to spiritus closed.
debug1: Transferred: stdin 0, stdout 0, stderr 79 bytes in 0.0 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 8319.2
debug1: Exit status -1

So I successfully autheticate using ssh keys and when the session is started something
bums out. On the target (spiritus/sid) machine I get in /var/log/auth.log:

Oct 18 12:54:25 spiritus sshd[14571]: Could not reverse map address 192.168.12.1.
Oct 18 12:54:25 spiritus sshd[14571]: PAM rejected by account configuration[9]:  Authentication service cannot retrieve authentication info.
Oct 18 12:54:25 spiritus sshd[14571]: fatal: monitor_read: unsupported request: 24

The first is also strange since 'dig -x 192.168.12.1' produces the
expected results. If I use libc6_2.2.5-15_i386.deb I get:

Oct 18 13:01:44 spiritus sshd[14886]: Accepted publickey for arthur from 192.168.12.1 port 3947 ssh2
Oct 18 13:01:44 spiritus ssh(pam_unix)[14888]: session opened for user arthur by (uid=1000)

and I get a session.

My /etc/nsswitch.conf:
passwd:         files ldap
group:          files ldap
shadow:         files ldap
hosts:          files dns
networks:       files
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

my /etc/resolv.conf:
search thuis.net
nameserver 192.168.12.1

my /etc/pam.d/ssh:
#%PAM-1.0
auth       required     pam_nologin.so
auth       required     pam_unix.so
auth       required     pam_env.so # [1]
account    required     pam_unix.so
session    required     pam_unix.so
session    optional     pam_lastlog.so # [1]
session    optional     pam_motd.so # [1]
session    optional     pam_mail.so standard noenv # [1]
session    required     pam_limits.so
password   required     pam_unix.so

The user that I try to login as has an account in /etc/passwd.

The versions of pam (libpam-modules, libpam-runtime, libpam0g) I tried this with are:
0.76-3, 0.76-4, 0.76-5 and 0.76-6. All these versions fail.

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux spiritus 2.4.18 #10 Sun May 12 22:32:47 CEST 2002 i686
Locale: LANG=C, LC_CTYPE=

Versions of packages libc6 depends on:
ii  libdb1-compat                 2.1.3-6    The Berkeley database routines [gl

-- no debconf information

-- arthur - arthur@tiefighter.et.tudelft.nl - http://tiefighter.et.tudelft.nl/~arthur --


---------------------------------------
Received: (at 165373-done) by bugs.debian.org; 20 Oct 2002 06:16:27 +0000
>From gotom@debian.or.jp Sun Oct 20 01:16:26 2002
Return-path: <gotom@debian.or.jp>
Received: from oris.opensource.jp (oris.opensource.gr.jp) [218.44.239.73] ([PZU2+eV0SkZ0dvoi03ZpE+OelN5u36cl])
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 1839Ny-0003ba-00; Sun, 20 Oct 2002 01:16:26 -0500
Received: from oris.opensource.jp (oris.opensource.jp [218.44.239.73])
	by oris.opensource.gr.jp (Postfix) with ESMTP
	id 4DBB2C33C1; Sun, 20 Oct 2002 15:16:25 +0900 (JST)
Date: Sun, 20 Oct 2002 15:16:25 +0900
Message-ID: <80n0p9vdmu.wl@oris.opensource.jp>
From: GOTO Masanori <gotom@debian.or.jp>
To: Arthur de Jong <arthur@tiefighter.et.tudelft.nl>,
	165373-done@bugs.debian.org
Cc: Jeff Bailey <jbailey@nisa.net>
Subject: Re: Bug#165373: libc6: cannot login using ssh
In-Reply-To: <[🔎] 20021018165229.GA11215@nisa.net>
References: <[🔎] Pine.LNX.4.44.0210181755130.1846-100000@ch.its.tudelft.nl>
	<[🔎] 20021018165229.GA11215@nisa.net>
User-Agent: Wanderlust/2.9.9 (Unchained Melody) SEMI/1.14.3 (Ushinoya)
 FLIM/1.14.3 (=?ISO-8859-4?Q?Unebigory=F2mae?=) APEL/10.3 Emacs/21.2
 (i386-debian-linux-gnu) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.3 - "Ushinoya")
Content-Type: text/plain; charset=US-ASCII
Delivered-To: 165373-done@bugs.debian.org
X-Spam-Status: No, hits=-9.3 required=5.0
	tests=IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_00_01,
	      USER_AGENT
	version=2.41
X-Spam-Level: 

At Fri, 18 Oct 2002 09:52:29 -0700,
Jeff Bailey wrote:
> On Fri, Oct 18, 2002 at 05:55:59PM +0200, Arthur de Jong wrote:
> 
> > This problem is introduced when using libc6_2.3.1-1_i386.deb, when
> > reinstalling libc6_2.2.5-15_i386.deb the problem goes away.
> 
> This is a known problem, 2.3.1-2 will contain the right warning.
> Restart sshd (and anything else that does NSS lookups) after upgrading
> glibc and you'll be fine.

glibc 2.3.1-2 is released. I close this bug.

Regards,
-- gotom



Reply to: