ssh password lenght

[Charlie Ruedi_1]

Hello everyone,

I've been working with OpenSSH 4.2p1 on multiple RP boxes running 11.11 with the same patch sets on all systems.

On one system I can use a 10 character password without any trouble, but on the others any password over 8 characters is rejected, but they will work fine with telent ect.

The logs simply say failed password with no other messages.

The sshd_config files are identical except for logging functions and the banner files.

Does anyone know why some of my systems won't support a 10 character password with SSH?

Thanks,
Charlie

[Robert-Jan Goossens_1]

Hi Charlie,

are the servers which allow >8 characters non trusted systems, and the other servers trusted systems?

Robert-Jan

[Charlie Ruedi_1]

All servers are running in trusted mode.

[Peter Godron]

Charlie,
assuming the same configuration across the machines:
1. Add -v to the client side connect (verbose)
2. Run the server side daemon in debug and check the logs. sshd -d

[Steven E. Protter]

Shalom,

Possibly an inconsistency in the general security settings for the three trusted systems.

Please confirm and report back.

SEP

[Robert-Jan Goossens_1]

Check this doc.

Title: HP-UX: users with passwords >8 characters cannot login after upgrading ssh

Europe
http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000079977540

US
http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000079977540

[Charlie Ruedi_1]

Thanks all!

It was the UsePAM entry in the sshd_config file which was set to yes on my systems which are working and no on the others

[Charlie Ruedi_1]

see above post