Re: Probem with openssh and pam modules

2002-10-07 Thread Matt Zimmerman
On Wed, Oct 02, 2002 at 11:32:10PM +, Alexis Sukrieh wrote: > But well, if I run unstable and I find a strange problem with such an > important package, I have to tell the debian community. I think that's > one of the purpose of that mailing-list : knowing problems coming with the > packages.

Re: Probem with openssh and pam modules

2002-10-07 Thread Matt Zimmerman
On Wed, Oct 02, 2002 at 11:32:10PM +, Alexis Sukrieh wrote: > But well, if I run unstable and I find a strange problem with such an > important package, I have to tell the debian community. I think that's > one of the purpose of that mailing-list : knowing problems coming with the > packages

Re: Probem with openssh and pam modules

2002-10-07 Thread Peter Cordes
On Wed, Oct 02, 2002 at 11:13:06PM +0200, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? No, we don't. We hope people running unstable report any problems they run into, so that information can be used to improve Deb

Re: Probem with openssh and pam modules

2002-10-07 Thread Peter Cordes
On Wed, Oct 02, 2002 at 11:13:06PM +0200, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? No, we don't. We hope people running unstable report any problems they run into, so that information can be used to improve De

Re: Probem with openssh and pam modules

2002-10-03 Thread Marcus Beranek
Am Mittwoch, 2. Oktober 2002 22:38 schrieb Alexis Sukrieh: > And the winner is . > > > just a guess: > > What about disabling all "session"-entries except the first in the > > /etc/pam.d/shh like this: > > Marcus !! > > Wünderbar ! :) :-) > It works when I disable other session entries. >

Re: Probem with openssh and pam modules

2002-10-03 Thread Marcus Beranek
Am Mittwoch, 2. Oktober 2002 22:38 schrieb Alexis Sukrieh: > And the winner is . > > > just a guess: > > What about disabling all "session"-entries except the first in the > > /etc/pam.d/shh like this: > > Marcus !! > > Wünderbar ! :) :-) > It works when I disable other session entries.

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
On Wed, 2002-10-02 at 21:13, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? If they can't they should be running stable > or at least testing? Excuse me sir ! But well, if I run unstable and I find a strange problem

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
This one time, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? If they can't they should be running stable > or at least testing? I think there's nothing wrong with helping someone out, no matter which group they're run

Re: Probem with openssh and pam modules

2002-10-02 Thread Lupe Christoph
Correct me if I'm wrong, but don't we expect people who run unstable to diagnoseproblems themselves? If they can't they should be running stable or at least testing? Unstable is not just a name... Lupe Christoph On Wednesday, 2002-10-02 at 09:44:38 -0700, Anne Carasik wrote: > This one time, Alex

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
On Wed, 2002-10-02 at 21:13, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? If they can't they should be running stable > or at least testing? Excuse me sir ! But well, if I run unstable and I find a strange problem

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
This one time, Lupe Christoph wrote: > Correct me if I'm wrong, but don't we expect people who run unstable to > diagnoseproblems themselves? If they can't they should be running stable > or at least testing? I think there's nothing wrong with helping someone out, no matter which group they're ru

Re: Probem with openssh and pam modules

2002-10-02 Thread Lupe Christoph
Correct me if I'm wrong, but don't we expect people who run unstable to diagnoseproblems themselves? If they can't they should be running stable or at least testing? Unstable is not just a name... Lupe Christoph On Wednesday, 2002-10-02 at 09:44:38 -0700, Anne Carasik wrote: > This one time, Ale

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
And the winner is . > just a guess: > What about disabling all "session"-entries except the first in the > /etc/pam.d/shh like this: Marcus !! Wünderbar ! :) It works when I disable other session entries. Thanks a lot to all of you, I'm really happy to come back to ssh (telnet sucks

Re: Probem with openssh and pam modules

2002-10-02 Thread Marcus Beranek
Am Mittwoch, 2. Oktober 2002 17:01 schrieb Alexis Sukrieh: > At 16:56 02/10/2002 +0200, [EMAIL PROTECTED] wrote: > >did you check all module invoked in /etc/pam.d/ssh can be found > >in /lib/security/ ? > > Yes it can be found. > > here, take a look : Hi, just a guess: What about disabling all

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
This one time, Alexis Sukrieh wrote: > Well, again it is not the solution for me ! > It is yet turned off Hmmm.. not sure. > is this a common problem ??? I'm surprised in the way that every > intelligent solutions you all provide to me are ineffectvie... Hmmm.. try apt-get remove --purge o

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
And the winner is . > just a guess: > What about disabling all "session"-entries except the first in the > /etc/pam.d/shh like this: Marcus !! Wünderbar ! :) It works when I disable other session entries. Thanks a lot to all of you, I'm really happy to come back to ssh (telnet sucks

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
At 17:25 02/10/2002 +0200, Giacomo Mulas wrote: since openssh v3.3 was released, I never got it to work well with PAM. I think it has something to do with privilege separation, whereby the listening daemon is unable to use PAM due to insufficient privileges, since it is running as an unpr

Re: Probem with openssh and pam modules

2002-10-02 Thread Giacomo Mulas
since openssh v3.3 was released, I never got it to work well with PAM. I think it has something to do with privilege separation, whereby the listening daemon is unable to use PAM due to insufficient privileges, since it is running as an unprivileged user. Is PAMAuthenticationViaKbdInt enabl

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
At 16:56 02/10/2002 +0200, [EMAIL PROTECTED] wrote: did you check all module invoked in /etc/pam.d/ssh can be found in /lib/security/ ? Yes it can be found. here, take a look : __ poseidon:/etc/pam.d# cat /etc/pam.d/ssh #%PAM-1.0 auth require

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Hi Alexis, Did you setup /etc/pam.d/ssh? -Anne This one time, Alexis Sukrieh wrote: > Hehe :) > > yes, but before mailing here, I've supposed that there was a missing > packagedependance in unstable and I look for pam* stuff. > > I found those ones > > libpam-modules - Pluggable Authenticati

Re: Probem with openssh and pam modules

2002-10-02 Thread administrateur
did you check all module invoked in /etc/pam.d/ssh can be found in /lib/security/ ? c++, Tonio En réponse à Anne Carasik <[EMAIL PROTECTED]>: > Hi there, > > This might provide a clue: > debug1: PAM setting tty to \"/dev/pts/3\" > PAM session setup failed[28]: Module is unknown > > -Anne >

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
Hehe :) yes, but before mailing here, I've supposed that there was a missing packagedependance in unstable and I look for pam* stuff. I found those ones libpam-modules - Pluggable Authentication Modules for PAM libpam0g - Pluggable Authentication Modules library and I installed it. I also i

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Hi there, This might provide a clue: debug1: PAM setting tty to "/dev/pts/3" PAM session setup failed[28]: Module is unknown -Anne This one time, Alexis Sukrieh wrote: > here is the full output > > ( I've turned UsePrivilegeSeparation to "no" ) > > >

Re: Probem with openssh and pam modules

2002-10-02 Thread Marcus Beranek
Am Mittwoch, 2. Oktober 2002 17:01 schrieb Alexis Sukrieh: > At 16:56 02/10/2002 +0200, [EMAIL PROTECTED] wrote: > >did you check all module invoked in /etc/pam.d/ssh can be found > >in /lib/security/ ? > > Yes it can be found. > > here, take a look : Hi, just a guess: What about disabling all

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
here is the full output ( I've turned UsePrivilegeSeparation to "no" ) ___ poseidon:~# sshd -ddd debug1: sshd version OpenSSH_3.4p1 Debian 1:3.4p1-2 debug3: Not a RSA1 key file /etc/ssh/ssh_host_rsa_key. debug1: read PEM private key done: type

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Kill your sshd. Run it in debugging mode (it will not fork a process): # sshd -ddd Open another window, now run the client in verbose mode: $ ssh -vvv [EMAIL PROTECTED] Then email us the output. :) Otherwise, this is really difficult to troubleshoot. -Anne This one time, Alexis Sukrieh wrot

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
This one time, Alexis Sukrieh wrote: > Well, again it is not the solution for me ! > It is yet turned off Hmmm.. not sure. > is this a common problem ??? I'm surprised in the way that every > intelligent solutions you all provide to me are ineffectvie... Hmmm.. try apt-get remove --purge

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
You're right, it was set to yes but after putting it to 'no', the same problem is still there... At 16:11 02/10/2002 +0200, you wrote: You need to turn off UsePrivilegeSeparation in your /etc/ssh/sshd_config file. "UsePrivilegeSeparation no" Alexis Sukrieh (sukria), <[EMAIL PROTECTED]> .

Re: Probem with openssh and pam modules

2002-10-02 Thread Laurent Luyckx
You need to turn off UsePrivilegeSeparation in your /etc/ssh/sshd_config file. "UsePrivilegeSeparation no" Cheers. On Wed, 2002-10-02 at 16:00, Alexis Sukrieh wrote: > Hello there :) > > I run debian unstable. > > I've just upgraded to the latest ssh package and I cannot connect to my box >

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
At 17:25 02/10/2002 +0200, Giacomo Mulas wrote: > since openssh v3.3 was released, I never got it to work well with >PAM. I think it has something to do with privilege separation, whereby >the listening daemon is unable to use PAM due to insufficient privileges, >since it is running as an

Re: Probem with openssh and pam modules

2002-10-02 Thread Giacomo Mulas
since openssh v3.3 was released, I never got it to work well with PAM. I think it has something to do with privilege separation, whereby the listening daemon is unable to use PAM due to insufficient privileges, since it is running as an unprivileged user. Is PAMAuthenticationViaKbdInt enab

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
At 16:56 02/10/2002 +0200, [EMAIL PROTECTED] wrote: >did you check all module invoked in /etc/pam.d/ssh can be found >in /lib/security/ ? Yes it can be found. here, take a look : __ poseidon:/etc/pam.d# cat /etc/pam.d/ssh #%PAM-1.0 auth require

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Hi Alexis, Did you setup /etc/pam.d/ssh? -Anne This one time, Alexis Sukrieh wrote: > Hehe :) > > yes, but before mailing here, I've supposed that there was a missing > packagedependance in unstable and I look for pam* stuff. > > I found those ones > > libpam-modules - Pluggable Authenticat

Re: Probem with openssh and pam modules

2002-10-02 Thread administrateur
did you check all module invoked in /etc/pam.d/ssh can be found in /lib/security/ ? c++, Tonio En réponse à Anne Carasik <[EMAIL PROTECTED]>: > Hi there, > > This might provide a clue: > debug1: PAM setting tty to \"/dev/pts/3\" > PAM session setup failed[28]: Module is unknown > > -Anne

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
Hehe :) yes, but before mailing here, I've supposed that there was a missing packagedependance in unstable and I look for pam* stuff. I found those ones libpam-modules - Pluggable Authentication Modules for PAM libpam0g - Pluggable Authentication Modules library and I installed it. I also in

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Hi there, This might provide a clue: debug1: PAM setting tty to "/dev/pts/3" PAM session setup failed[28]: Module is unknown -Anne This one time, Alexis Sukrieh wrote: > here is the full output > > ( I've turned UsePrivilegeSeparation to "no" ) > > > ___

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
here is the full output ( I've turned UsePrivilegeSeparation to "no" ) ___ poseidon:~# sshd -ddd debug1: sshd version OpenSSH_3.4p1 Debian 1:3.4p1-2 debug3: Not a RSA1 key file /etc/ssh/ssh_host_rsa_key. debug1: read PEM private key done: type

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
Kill your sshd. Run it in debugging mode (it will not fork a process): # sshd -ddd Open another window, now run the client in verbose mode: $ ssh -vvv user@host Then email us the output. :) Otherwise, this is really difficult to troubleshoot. -Anne This one time, Alexis Sukrieh wrote: > Yo

Re: Probem with openssh and pam modules

2002-10-02 Thread Alexis Sukrieh
You're right, it was set to yes but after putting it to 'no', the same problem is still there... At 16:11 02/10/2002 +0200, you wrote: >You need to turn off UsePrivilegeSeparation >in your /etc/ssh/sshd_config file. > >"UsePrivilegeSeparation no" Alexis Sukrieh (sukria), <[EMAIL PROTECTED]>

Re: Probem with openssh and pam modules

2002-10-02 Thread Laurent Luyckx
You need to turn off UsePrivilegeSeparation in your /etc/ssh/sshd_config file. "UsePrivilegeSeparation no" Cheers. On Wed, 2002-10-02 at 16:00, Alexis Sukrieh wrote: > Hello there :) > > I run debian unstable. > > I've just upgraded to the latest ssh package and I cannot connect to my box >