SSHD 3.7.1p2 on HP-UX

[Michael Steffens]

Jan P. Sorensen wrote:
> Yes, HP-UX is run in trusted mode.
> 
> Notice that the problem first appeared today when I upgraded from p1 to
> p2.

The relevant difference is that p1 had PAM enabled by default, while
it was disabled in p2.

So it refers to non-PAM password authentication, which is broken
in both for trusted systems and those using shadow passwords.

Does

   http://bugzilla.mindrot.org/attachment.cgi?id=386&action=view

fix it?

Alternatively, you may explicitly enable PAM in sshd_config
and contemplate about whether this is secure or not...

Cheers!
Michael