openssh bugs - Nov 2025 - [Bug 3892] New: When connecting via SSH, if the password is about to expire or has already expired, two duplicate statements will be prompted

https://bugzilla.mindrot.org/show_bug.cgi?id=3892

            Bug ID: 3892
           Summary: When connecting via SSH, if the password is about to
                    expire or has already expired, two duplicate
                    statements will be prompted
           Product: Portable OpenSSH
           Version: 9.6p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: 1793702515 at qq.com

Hello, about openssh, I have noticed a phenomenon. When connecting via
SSH, if the password is about to expire or has already expired, two
duplicate statements will be prompted.

Like this,

[root at localhost.localdomain ~]$ ssh testuser at xx.xx.xx.xx

Authorized users only. All activities may be monitored and reported.
testuser at xx.xx.xx.xx's password: 
Warning: your password will expire in 1 day.
Warning: your password will expire in 1 day.

Authorized users only. All activities may be monitored and reported.

For this, I wonder if the two hint statements are somewhat redundant? 
Looking forward to your reply, I would greatly appreciate it.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3892

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
It's possible that the duplicate messages are coming from your PAM
configuration. A debug trace from the server (/path/to/sshd -ddd) will
tell us for sure.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3892

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #2 from Darren Tucker <dtucker at dtucker.net> ---
You can also use pam-test-harness.c from
https://www.dtucker.net/patches/ to show exactly what PAM is sending
and when.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.