openssh bugs - Nov 2003 - [Bug 738] OpenSSH 3.7.1p2 Password Authentication Failure Through NIS+ on Non-Master Server

http://bugzilla.mindrot.org/show_bug.cgi?id=738





------- Additional Comments From dtucker at zip.com.au  2003-11-19 23:47
-------
>From the description:
"TO SUMMARIZE: I have problems WHEN: I log in via SSH to the non-master
NIS+
server with a non-local account (NIS+ account) with a Windows client 
via 'Password' authentication."

As of 3.7p1, PasswordAuthentication does not use PAM.  You need to use
ChallengeResponseAuthentication (and probably disable PasswordAuthentication).

It works on your NIS master server because getspnam and friends can get the
encrypted password directly from the shadow file, so PasswordAuthentication
works.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=738





------- Additional Comments From dtucker at zip.com.au  2003-12-18 17:24 -------
Since 3.7p1, even when UsePAM=yes, password authentication does not use PAM.

I suggest you set PasswordAuthentication to "no", this will prevent
your Windows
clients from trying Password auth and (hopefully) switch to
keyboard-interactive, then close this bug.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.