openssh unix dev - Oct 2003 - Connection drops after entering password.

Has anyone seen the error that I'm getting below?  After you ssh to the box
and enter the password the connection just closes.

SSH Version
{ root at xxxxxxxx} # ssh -V
OpenSSH_3.7p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003

OS Version
{ root at xxxxxxxx } # oslevel -r
AIX 4330-09

SSH Connect Failure
{ root at xxxxxxxxx } # ssh -l xxxxxxxxx -v localhost
OpenSSH_3.7p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: Connection established.
debug1: identity file /.ssh/identity type -1
debug1: identity file /.ssh/id_rsa type -1
debug1: identity file /.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.7p1
debug1: match: OpenSSH_3.7p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'localhost' is known and matches the DSA host key.
debug1: Found key in /.ssh/known_hosts:2
debug1: ssh_dss_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /.ssh/identity
debug1: Trying private key: /.ssh/id_rsa
debug1: Trying private key: /.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: password
aagnello at localhost's password:
debug1: Authentication succeeded (password).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: channel 0: free: client-session, nchannels 1
Connection to localhost closed by remote host.
Connection to localhost closed.
debug1: Transferred: stdin 0, stdout 0, stderr 81 bytes in 0.0 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 3480.0
debug1: Exit status -1


/var/adm/messages
Oct  2 13:05:29 xxxxxxxxx sshd[18860]: Accepted password for xxxxxxxxx
xxx.xxx.xxx port 1775 ssh2
Oct  2 13:05:29 xxxxxxxxx sshd[21276]: fatal: Failed to set process
credentials


Thanks,

............................................................................

Tony Agnello
UNIX Technical Services
IBM Global Services - SDC Northeast
1701 North St, Endicott, NY 13760
...........................................................................

Anthony Agnello wrote:
> 
> Has anyone seen the error that I'm getting below?  After you ssh to the
box
> and enter the password the connection just closes.
> 
> SSH Version
> { root at xxxxxxxx} # ssh -V
> OpenSSH_3.7p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003
> 
> OS Version
> { root at xxxxxxxx } # oslevel -r
> AIX 4330-09
[snip]
> /var/adm/messages
> Oct  2 13:05:29 xxxxxxxxx sshd[18860]: Accepted password for xxxxxxxxx
> xxx.xxx.xxx port 1775 ssh2
> Oct  2 13:05:29 xxxxxxxxx sshd[21276]: fatal: Failed to set process
> credentials
The call to setpcred() is failing for some reason.  Does it happen for all
accounts or only some?  Do those accounts work OK with telnet?

You can try the attached patch which will make the error non-fatal and log
the errno returned, which might help figure out what's going on.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
-------------- next part --------------
Index: session.c
==================================================================RCS file:
/usr/local/src/security/openssh/cvs/openssh_cvs/session.c,v
retrieving revision 1.257
diff -u -p -r1.257 session.c
--- session.c	2 Oct 2003 10:07:09 -0000	1.257
+++ session.c	3 Oct 2003 02:53:35 -0000
@@ -1229,7 +1229,8 @@ do_setusercontext(struct passwd *pw)
 
 #ifdef HAVE_SETPCRED
 		if (setpcred(pw->pw_name, (char **)NULL) == -1)
-			fatal("Failed to set process credentials");
+			error("Failed to set process credentials: %s",
+			    strerror(errno));
 #endif /* HAVE_SETPCRED */
 #ifdef HAVE_LOGIN_CAP
 # ifdef __bsdi__