Hi, I still do not understand the ultimate cause of the problem, but the following patch (removing some woody compatibility hacks) solves the problem for me: after applying the patch the keyboard-interactive authentication method with PAM works. All the best, Jochen -- http://seehuhn.de/
diff -ur openssh-3.8.1p1.old/debian/changelog openssh-3.8.1p1/debian/changelog --- openssh-3.8.1p1.old/debian/changelog 2006-07-29 17:21:19.000000000 +0100 +++ openssh-3.8.1p1/debian/changelog 2006-07-29 16:39:34.000000000 +0100 @@ -1,3 +1,9 @@ +openssh (1:3.8.1p1-8.sarge.4.1) unstable; urgency=low + + * Remove broken compatibility hacks (closes: #364635). + + -- Jochen Voss <voss@debian.org> Sat, 29 Jul 2006 16:38:43 +0100 + openssh (1:3.8.1p1-8.sarge.4) unstable; urgency=high * Fix timing information leak allowing discovery of invalid usernames in diff -ur openssh-3.8.1p1.old/debian/rules openssh-3.8.1p1/debian/rules --- openssh-3.8.1p1.old/debian/rules 2006-07-29 17:21:19.000000000 +0100 +++ openssh-3.8.1p1/debian/rules 2006-07-29 16:55:31.000000000 +0100 @@ -60,12 +60,7 @@ mkdir -p build-deb cd build-deb && $(FORCE_LIBS) ../configure --prefix=/usr --sysconfdir=/etc/ssh --libexecdir=/usr/lib --mandir=/usr/share/man --with-tcp-wrappers --with-xauth=/usr/bin/X11/xauth --with-default-path=/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin --with-superuser-path=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin --with-pam --with-4in6 --with-privsep-path=/var/run/sshd --without-rand-helper - # Some 2.2 kernels have trouble with setres[ug]id() (bug #239999). - perl -pi -e 's/.*#undef (BROKEN_SETRES[UG]ID).*/#define $$1 1/' build-deb/config.h - # Supply pthread linkage for just those binaries linked to PAM. - perl -pi -e 's/^(LIBPAM=.*)/$$1 -pthread/' build-deb/Makefile - - $(MAKE) -C build-deb -j 2 ASKPASS_PROGRAM='/usr/bin/ssh-askpass' CFLAGS='$(OPTFLAGS) -g -Wall -DUSE_POSIX_THREADS -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT -DSSHD_PAM_SERVICE=\"ssh\" -DSSH_VERSION="\"$(SSH_VERSION)\""' SSH_KEYSIGN='/usr/lib/ssh-keysign' + $(MAKE) -C build-deb ASKPASS_PROGRAM='/usr/bin/ssh-askpass' CFLAGS='$(OPTFLAGS) -g -Wall -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT -DSSHD_PAM_SERVICE=\"ssh\" -DSSH_VERSION="\"$(SSH_VERSION)\""' SSH_KEYSIGN='/usr/lib/ssh-keysign' # Support building on Debian 3.0 (with GNOME 1.4) and later. if [ -f /usr/include/libgnomeui-2.0/gnome.h ]; then \ $(MAKE) -C contrib gnome-ssh-askpass2 CC='gcc $(OPTFLAGS) -g -Wall'; \
Attachment:
signature.asc
Description: Digital signature