2.1.1p2 HP-UX 11 PAM General Commerical Security error

[Damien Miller]

On Fri, 7 Jul 2000, Kevin Steves wrote:

> On Mon, 3 Jul 2000, Kevin Steves wrote:
> > Jul  3 15:19:29 robinson sshd[1293]: PAM rejected by account configuration: [32] General Commercial Security error

> Not much progress made other than I discovered I don't get this error and
> can log in successfully when running the server in debug mode (i.e., 
> "sshd -d").
> 
> Strange.  Any ideas?

Some PAM modules fail mysteriously because ssh doesn't always set
the PAM_TTY. At least one of these (pam_tty) then assumes (stupidly
IMNSHO) that fd 0 is the tty and tries to use that. This will cause
failures when sshd is run in daemon mode, but not in debug mode.

Perhaps an strace/truss of the failure would shed some light on it.

-d

-- 
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)