AIX and openssh 3.7.1p2 with privsep

[Darren Tucker]

andy.tompkins at autozone.com wrote:
> I am attempting to run openssh 3.7.1p2 with privsep on AIX 5.2 ML2 (with
> the december 2003 critical patches also).
[snip]

> After inputting password, connection is dropped, and logged error is
> "sshd[24872]: fatal: Failed to set process credentials"

That's setpcred failing, but I don't know why.  (I've had one other 
report recently, but it works fine here on 5.2 w/ML1).  As a short-term 
fix you could comment out "HAVE_SETPCRED" from config.h and recompile, 
but we really need to figure out what the root cause is.

I might grab ML2 and see if I can replicate it.

[snip]
> Failed to set process credentials: A file or directory in the path name
> does not exist.
[snip]
> I noticed that the actual error is "A file or directory in the path name
> does not exist."
> Too bad its not telling me WHAT file or dir.

It's just printing out the contents or errno.
AIX 5.2 has truss (or was that strace?), try running sshd -D under truss 
and see if it shows what access failed.  You'll need "-f" on truss to 
follow forks.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.