openssh bugs - Oct 2007 - [Bug 1374] New: sshd -D produces zombies if authentication is interrupted

http://bugzilla.mindrot.org/show_bug.cgi?id=1374

           Summary: sshd -D produces zombies if authentication is
                    interrupted
           Product: Portable OpenSSH
           Version: 4.7p1
          Platform: All
        OS/Version: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: jwk at bug.it


If sshd 4.7p1 and earlier is run with "-D" flag under FreeBSD and
PrivilegeSeparation is enabled, the daemon leaves a zombie if a
connection is reset during authentication. Example follows.

before:

% ps auwx | grep sshd
root       6160  0.0  0.2  2852  2380  p0  S+   11:43PM   0:00.02
/usr/sbin/sshd -D -e

connecting:

% ps auwx | grep sshd
sshd       6189  0.0  0.2  4260  2540  ??  S    11:45PM   0:00.01 sshd:
jwk [net] (sshd)
root       6190  0.0  0.3  4452  2700  ??  S    11:45PM   0:00.00 sshd:
jwk [pam] (sshd)
root       6160  0.0  0.2  2852  2380  p0  S+   11:43PM   0:00.02
/usr/sbin/sshd -D -e

after:

% ps auwx | grep sshd
sshd       6189  0.0  0.0     0     0  ??  Z    11:45PM   0:00.01
<defunct>
root       6160  0.0  0.2  2852  2380  p0  I+   11:43PM   0:00.02
/usr/sbin/sshd -D -e

stderr reports:

Server listening on :: port 22.
Server listening on 0.0.0.0 port 22.
Postponed keyboard-interactive for jwk from [...] port 14668 ssh2
Connection closed by [...]


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1374


Giacomo Cariello <jwk at bug.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|bitbucket at mindrot.org       |openssh-bugs at mindrot.org




-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1374


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au




--- Comment #1 from Darren Tucker <dtucker at zip.com.au>  2008-06-14
10:28:18 ---
I have tried to reproduce this on FreeBSD 6 with both 4.7p1 and
-current but could not (I kill -9'ed the client to cause a connection
reset) but could not.

Which version of FreeBSD is this?  Also, is this an unmodified OpenSSH?
 Which sshd_config options do you have enabled?  (I can tell from the
output that you have at least UsePAM enabled.)

Could you please run the server with increased loglevel and attach the
output ("Create Attachment" rather than pasting in the comment field
please), eg:

/path/to/sshd -De -ologlevel=debug3 -p 2022 -o usepam=yes

Thanks.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1374

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME

--- Comment #2 from Damien Miller <djm at mindrot.org> 2011-06-03 12:27:55
EST ---
3 years, no followup = closed bug

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1374

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> 2011-09-06 15:32:58
EST ---
close resolved bugs now that openssh-5.9 has been released

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.