badpw[] = "\b\n\r\177INCORRECT"

Le Gal Philippe Philippe.LeGal at emea.eu.int
Mon Jan 30 20:37:55 EST 2006


Hi !

I'm trying to authenticate users on a Linux Red hat AS 2.1 against a radius server.

I have upgraded my OpenSSHd to :
OpenSSH_4.2p1, OpenSSL 0.9.6b [engine] 9 Jul 2001

The users accounts are NOT stored locally on the sever (no accounts in /etc/passwd ). Users ssh to the box :   ssh test at testserver.com   passwd: test
I'm usign PAM to direct the authentication request to the radius server. That part works fine. 
But the request coming to the radius looks like : 

        User-Name = "test"
        User-Password = "\010\n\INCORRECT"

I found this in : auth-pam.c

badpw[] = "\b\n\r\177INCORRECT";

- What is supposed to be the behaviour of ssh when it is used with PAM ? Shall SSh pass on to PAM the exact credentials entered at the prompt (username and passwd) without affecting them (by putting "INCORRECT" in the passwd : buffer_put_cstring(&buffer, badpw);  auth-pam.c in sshpam_respond() )?

(BTW, this is how I have installed ssh on my linux box :
./configure --with-pam --prefix=/usr --sysconfdir=/etc/ssh 
make
make install)

- I found that other OpenSSH user had a similar problem. Is there a workaround ? 

Thank you for your help. I'm really struggling with this... !

Philippe

________________________________________________________________________
This e-mail has been scanned for all known viruses by EMEA.
________________________________________________________________________




More information about the openssh-unix-dev mailing list