search for: keylogout

The 2 errors: pam_setcred: error Permission denied Cannot delete credentials[7]: Permission denied Looks to be a major bug in the PAM module for Solaris-2.8/2.7/2.6. Has anyone from the list (developers of OpenSSH, endusers, hackers, etc.) came up w/ a solution? Even a temporary one? When authenticating yourself on the same system that worked, but when authenticating to another system failed. I

...pires and I try to login I get the following message ssh username at hostname username at hostname's password: Warning: Your password has expired, please change it now Enter login password: removing root credentials would break the rpc services that use secure rpc on this host! root may use keylogout -f to do this (at your own risk)! Connection to hostname closed by remote host. Connection to hostname closed. But when ssh into the same server using ssh -1 username at hostname it works just fine. ssh -1 username at hostname username at hostname's password: Warning: Your password has expire...

...hadow), the ssh server system prompts me to change the password and then asks for the current password. Upon entering the current password, on an intermittant basis I get a message saying: "removing root credentials would break the rpc services that use secure rpc on this host! root may use keylogout -f to do this (at your own risk)!" and then the connection is closed. This message is apparently coming from the pam_unix.so.1 library. At other times, after entering the current password, I am prompted for the new password, as one would expect and I can successfully change the password....

...If UseLogin=no (the default) , if a user fails to use the correct password for a "change on first login" account, you get the following message: sshd(SYSTEM): Sorry, wrong passwd removing root credentials would break the rpc services that use secure rpc on this host! root may use keylogout -f to do this (at your own risk)! On the other hand, if UseLogin=yes telnet(SYSTEM): Sorry, wrong passwd Connection to srvwfs01 closed. I'm not exactly sure which is the preferred one to use here :-) Any recommendations? BTW: This was with making zero changes to the Solaris 8 /etc/pam....

In do_pam_cleanup_proc(), there are 3 calls to PAM: 1) pam_close_session() - do lastlog stuff 2) pam_setcred(PAM_DELETE_CRED) - delete credentials 3) pam_end() - close PAM It appears that pam_setcred() always fails with the error PAM_PERM_DENIED. This is due to a check done pam_unix.so to not allow a caller with euid 0 to even try to delete their SECURE_RPC credentials. When sshd calls

...get along 6273831 gcc and cmd/rpcsvc don''t get along Files: update: usr/src/cmd/keyserv/chkey.c update: usr/src/cmd/keyserv/chkey_common.c update: usr/src/cmd/keyserv/detach.c update: usr/src/cmd/keyserv/domainname.c update: usr/src/cmd/keyserv/keylogin.c update: usr/src/cmd/keyserv/keylogout.c update: usr/src/cmd/keyserv/keyserv.c update: usr/src/cmd/keyserv/newkey.c update: usr/src/cmd/keyserv/setkey.c update: usr/src/cmd/rpcsvc/nis/bin/nisadm.c update: usr/src/cmd/rpcsvc/nis/bin/nisctl.c update: usr/src/cmd/rpcsvc/nis/bin/nisping.c update: usr/src/cmd/rpcsvc/nis/bin/nisshowcac...