Dear list,
I'd appreciate some input from experts. I'm on Solaris 8, openssh 3.9p1,
openssl 0.9.7e, samba 2.2.9.
I'm using winbind so Windows users can use UNIX services. Pop, telnet, ftp
work with both windows and unix passwords OK, but I have a problem with
ssh.
Ssh accepts unix password, but not windows password.
I'm trying to do password authentication, but it fails with this.
(with no UsePAM line)
Apr 28 12:49:58 bkim sshd[25576]: [ID 800047 local3.info] Failed password
for bkim from 127.0.0.1 port 35721 ssh2
If I add "UsePAM yes",
Apr 28 08:43:58 bkim sshd[7609]: [ID 305314 local3.debug] load_modules:
/usr/lib/security/pam_winbind.so_042605
Apr 28 08:43:58 bkim sshd[7609]: [ID 401707 local3.debug] open_module:
/usr/lib/security/pam_winbind.so_042605 failed: Bad file number
Apr 28 08:43:58 bkim sshd[7609]: [ID 487707 local3.error] load_modules:
can not open module /usr/lib/security/pam_winbind.so_042605
Apr 28 08:43:58 bkim sshd[7609]: [ID 585537 local3.debug]
pam_authenticate: load_modules failed
Apr 28 08:43:58 bkim sshd[7609]: [ID 800047 local3.debug] debug1: PAM:
password authentication failed for bkim: Dlopen failure
I'm guessing the load_modules and open_module messages come from ld.so.1.
This seems a problem with library. Since other services have no problem, I
think this might be a problem with compiling ssh, so I recompiled openssl
(0.9.7e), openssh and samba 2.2.9, with no joy.
I wanted to know if someone can point to me where to look at.
Here is my configurations.
===============================================pam.conf
sshd auth sufficient /samba/source/nsswitch/pam_winbind.so debug
sshd auth requisite pam_authtok_get.so.1
sshd auth required pam_dhkeys.so.1
sshd auth required /usr/lib/security/$ISA/pam_unix.so.1 use_first_pass
sshd account sufficient /samba/source/nsswitch/pam_winbind.so
sshd account requisite pam_roles.so.1
sshd account required /usr/lib/security/$ISA/pam_unix.so.1
sshd session sufficient /samba/source/nsswitch/pam_winbind.so
sshd session required /usr/lib/security/$ISA/pam_unix.so.1
# cat ~bkim/openssh-3.9p1-configure-options.txt
./configure \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-privsep-user=sshd \
--with-xauth=/usr/X/bin/xauth \
--with-mantype=man \
--with-md5-passwords
# cat ~bkim/samba-2.2.9-configure-options.txt
./configure \
--with-winbind \
--with-winbind-auth-challenge \
--with-pam \
--with-pam_smbpass \
--with-smbwrapper \
--enable-debug \
--with-libsmbclient \
--with-ssl
I'd appreciate any clue.
Thanks.
Ben Kim
Developer
College of Education
Texas A&M University
