SSHD 3.7.1p2 on HP-UX
michael.steffens at hp.com
Wed Sep 24 22:47:06 EST 2003
Jan P. Sorensen wrote:
> Yes, HP-UX is run in trusted mode.
> Notice that the problem first appeared today when I upgraded from p1 to
The relevant difference is that p1 had PAM enabled by default, while
it was disabled in p2.
So it refers to non-PAM password authentication, which is broken
in both for trusted systems and those using shadow passwords.
Alternatively, you may explicitly enable PAM in sshd_config
and contemplate about whether this is secure or not...
More information about the openssh-unix-dev