SSH password problems

[Rainer von Bongartz]

I' am using Secure shell : A.03.81.002

login works find using ssh and PUTTY client.

If user changes his password, the change succeeds but on next (ssh) logon user is rejected:

Failed password for from A.B.C.D port 3000 ssh2

A telnet logon with new passowrd works find !!!

Any ideas (I have absolutely none)

Regards
Rainer

[Hoang Chi Cong_1]

Hello Rainer von Bongartz

It seems strange.
You can check and looking for more in this website:
http://www.ssh.com/support/downloads/secureshellserver/updates-and-packages-3-1.html
It is a good site talking about SSH.

Hope this helps
Regard,
Jimkery

[RAC_1]

Lets see what we can do.
start a new sshd.
sshd -ddd -p "some_other_port"

Try connecting and post

[Rainer von Bongartz]

here's the output of the connect

User can definitly logon on telnet prot with this password

Rainer

[Rainer von Bongartz]

btw. problems seems to arise after upgrading from

HP-UX Secure Shell A.03.61.002
to
HP-UX Secure Shell A.03.81.002

[RAC_1]

On ssh server, check sshd_config file.
Is PAM setting set to yes?? If not set it and try.
Post the results.

Anil

[Rainer von Bongartz]

Got it:

specification in /etc/default/security

MIN_PASSWORD_LENGTH=8

if you now change your password to 9 characters you cannot log in using ssh but still logon on telnet port using this 9-character password.

I see no reason for this behaviour as MIN_PASSWORD_LENGTH specifies a minimum password length and not a maximum password length !!!

Also I don't see the reason for the different behaviour of ssh and telnet.

Perhaps somebody could shed some light on this ??

Regards
Rainer

[Jeffrey Heneks_2]

I am having the same problem. Does anyone have a solution? The only difference in my situation is that I have not changed the Minimum password length paramater. A nine character password will fail for ssh, but work fine for telnet.

[Jordan Bean]

Trusted Mode, ShadowPasswords, or standard? I want to know where to concentrate.

[Bill Hassell]

This likely a standard system (ie, not Trusted). The problem is that the MAXIMUM password for allowed for a non-Trusted system is 8 characters. If you create or type a password with 9 characters, the extra character(s) will be ignored. Technically, that's not a desirable behavior and it does not match ssh which will try to match a 9 character encryption to an 8 character encryption (and always fails). Bottom line: To avoid compatibility issues, never use more than 8 characters for a non-Trusted system password.