openssh bugs - Oct 2006 - [Bug 1241] Connections to Tru64 hosts hang when password is expired.

http://bugzilla.mindrot.org/show_bug.cgi?id=1241

           Summary: Connections to Tru64 hosts hang when password is
                    expired.
           Product: Portable OpenSSH
           Version: 4.4p1
          Platform: Alpha
        OS/Version: OSF/1
            Status: NEW
          Keywords: patch
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: scott.bailey at eds.com


This is a longstanding bug which I believe is present in all 4.x
releases. When connecting to a Tru64 system where sshd was built with
--with-osfsia and the user's password is expired, the connect succeeds
but the session hangs (until the user disconnects with "~."). This has
the effect of locking users completely out of the system unless they
always change their passwords before they expire, or there is an
alternate access path (such as telnet) to work around the problem.

The attached patch corrects this issue for password-based
authentication by checking the password status and setting
force_pwchange when appropriate.

Other authentication methods (including my favorite, public-key-based)
are still screwed up because I couldn't figure out where to hook in the
password check. :-p

I hope this patch, or better yet an improved more comprehensive
version, will be included in future releases.

Thanks for an indispensible utility,
Scott




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1241





------- Comment #1 from scott.bailey at eds.com  2006-10-03 03:05 -------
Created an attachment (id=1194)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1194&action=view)
Add password expiration checking to auth-sia.c




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1241


scott.bailey at eds.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|bitbucket at mindrot.org       |openssh-bugs at mindrot.org






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.