AIX authenticate()

[J S]

Maybe I'm barking up the wrong tree here but I applied this patch to see if 
it would fix the securid authentication on AIX, but no such luck.

debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD
debug3: mm_request_receive_expect entering: type 11
debug3: mm_request_receive entering
debug3: mm_auth_password: user not authenticated
Failed none for u742359 from 165.3.156.65 port 1751 ssh2
debug1: userauth-request for user u752359 service ssh-connection method 
keyboard-interactive
debug1: attempt 1 failures 1
debug2: input_userauth_request: try method keyboard-interactive
debug1: keyboard-interactive devs
Failed keyboard-interactive for u742359 from 165.3.156.65 port 1751 ssh2
debug1: userauth-request for user u742359 service ssh-connection method 
password
debug1: attempt 2 failures 2
debug2: input_userauth_request: try method password
debug3: mm_auth_password entering

Cheers,

JS.


>Hi,
>
>I just got a comment from one of my IBM support engineeres that there
>is a problem with auth-passwd.c only calling authenticate() once. He
>claims it should potentially be called several times, in case several
>authetication methods are defined in /etc/security/user. F.ex.:
>
>	SYSTEM = "NIS and DCE"
>
>Suggested (untested) patch should look like:
>
>----------------- cut --------------------
>%  diff -u auth-passwd.c-original auth-passwd.c
>--- auth-passwd.c-original	2002-08-12 18:43:25.000000000 +0200
>+++ auth-passwd.c	2002-08-12 19:02:43.000000000 +0200
>@@ -114,6 +114,7 @@
>  #ifdef WITH_AIXAUTHENTICATE
>  	char *authmsg;
>  	char *loginmsg;
>+	int rc;
>  	int reenter = 1;
>  #endif
>
>@@ -145,7 +146,11 @@
>  	}
>  #endif
>  #ifdef WITH_AIXAUTHENTICATE
>-	return (authenticate(pw->pw_name,password,&reenter,&authmsg) == 0);
>+	while (reenter) {
>+		rc = authenticate (pw->pw_name,password,&reenter,&authmsg)
>+	}
>+	return (rc);
>  #endif
>  #ifdef KRB4
>  	if (options.kerberos_authentication == 1) {
>----------------- /cut -------------------
>
>It kind of looks like it's a slip that this isn't fixed in
>auth-passwd.c, as 'int reenter = 1;' is already available inside
>WITH_AIXAUTHENTICATE.
>
>
>   -jf
>_______________________________________________
>openssh-unix-dev at mindrot.org mailing list
>http://www.mindrot.org/mailman/listinfo/openssh-unix-dev




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com