You need to turn off UsePrivilegeSeparation in your /etc/ssh/sshd_config file. "UsePrivilegeSeparation no" Cheers. On Wed, 2002-10-02 at 16:00, Alexis Sukrieh wrote: > Hello there :) > > I run debian unstable. > > I've just upgraded to the latest ssh package and I cannot connect to my box > anymor using ssh. > I've set up telnet to test it and it works fine with telnet. > > First, here is the output when user try to connect to the box : > ____________________________________________________________ > > poseidon:/home/sukria/dev/debian/openssh-3.4p1# ssh sukria@localhost > sukria@localhost's password: > Connection to localhost closed by remote host. > Connection to localhost closed. > poseidon:/home/sukria/dev/debian/openssh-3.4p1# > _____________________________________________________________ > > > It appears to be a PAM related problem : > Indeed the password authentification is OK, but the system reject the user > after seeing that his pass is right : > if I run sshd in debug mode, I can see this error message > _________________________________________________________________ > > sshd -d > [...] > debug1: userauth-request for user sukria service ssh-connection method password > debug1: attempt 2 failures 2 > debug1: PAM Password authentication accepted for user "sukria" > Accepted password for sukria from 81.1.38.34 port 33095 ssh2 > [...] > debug1: session_input_channel_req: session 0 req shell > debug1: PAM setting tty to "/dev/pts/2" > PAM session setup failed[28]: Module is unknown > ____________________________________________________________________ > > Does anyone knows how I can solve that problem ?? > > I've tuned /etc/hosts.deny and /etc/hosts.allow... and again, telnet > conection are working fine... > > Thanks a lot for any help. > > Alexis. > > > Alexis Sukrieh (sukria), <alexis@sukria.net> > . homepage - [http://sukria.net] > . clef PGP - [http://sukria.net/print.php?c=privacy] > . mydynaweb - [http://www.mydynaweb.net] > ______________________________________________ > > > -- > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org >
Attachment:
signature.asc
Description: This is a digitally signed message part