openssh bugs - Oct 2003 - [Bug 728] SSH broken when UsePAM turned on

http://bugzilla.mindrot.org/show_bug.cgi?id=728

           Summary: SSH broken when UsePAM turned on
           Product: Portable OpenSSH
           Version: -current
          Platform: UltraSparc
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: PAM support
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: mm1329 at sbc.com


My systems require a PAM module that does a one time password authentication. 
The module we use is based on the freeradius code that is used on some linux
systems.  (We do not use it in challenge-response format.)  When UsePrivSep is
turned on, the connection is closed post authentication with:

pam_open_session(): Can not make/remove entry for session

logged as a critical auth error.

When PrivSep is disabled, basic login appears to work, but the error is still
logged.  scp is broken regardless for these systems.

What makes it strange is some Solaris 8 boxes do not exhibit this behavior while
others do.  I have been unable to trace down anything that would explain the
difference in behavior.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=728





------- Additional Comments From dtucker at zip.com.au  2003-10-04 11:59 -------
Check your OS patches.  ISTR that this behaviour is caused by certain Solaris
patches.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=728





------- Additional Comments From dtucker at zip.com.au  2003-10-07 17:28 -------
Does the patch in bug #703 make any difference?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=728





------- Additional Comments From mm1329 at sbc.com  2003-10-07 22:13 -------
Sun patch 111659-07 appears to have solved the problem.  (Took a couple days to 
ensure that the patch did in fact fix the issue.)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=728

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE



------- Additional Comments From dtucker at zip.com.au  2003-10-07 22:25 -------
Looks like a dupe of bug #703 then. 

*** This bug has been marked as a duplicate of 703 ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.