topic Re: PAM Authentication error in Operating System - HP-UX

PAM Authentication error

Kathy McGohan_1 — Fri, 15 Apr 2005 08:23:31 GMT

We have a rp7410 running HP-UX 11.0. The application is DEBX. When one of our accounts login to this system using sftp (has a shell, csh), we get the following error messages in our syslog.log file:
*********************************************
tadhp3 sshd[23495]: Pam_authenticate: error Authentication failed
tadhp3 sshd[23274]: error: PAM: Authentication failed for ts-trail from rally.doup.dla.mil
tadhp3 sshd[23515]: pam_authenticate: error Authentication failed
tadhp3 sshd[23274]: Accepted password for ts-trail from 121.40.32.100 port 3459 ssh2
tadhp3 sshd[23550]: subsystem request for sftp
tadhp3 sshd[23550]: pam_setcred: error Authentication failed
tadhp3 syslog: pam_authenticate: error No account present for user
*********************************************
The account is defined right in the password file and the user does get into the system without any problem. We have other sftp accounts coming into this server and we do not get any error messages, but their accounts are defined with /bin/false in the password file. The only sftp accounts which reports the error messages above have /usr/bin/csh defined in the password file. Would appreciate help on solving all these error messages from coming out in the syslog file.

Re: PAM Authentication error

RAC_1 — Fri, 15 Apr 2005 08:36:37 GMT

In sshd_config, is PAM set to yes??
Is the account locked??

Anil

Re: PAM Authentication error

Kathy McGohan_1 — Fri, 15 Apr 2005 11:22:03 GMT

Yes PAM is set to yes
UsePAM yes
The user's account is not locked - he is able to get into this system.
Anymore ideas?

Re: PAM Authentication error

Ermin Borovac — Mon, 18 Apr 2005 00:26:21 GMT

sftp may fail if $HOME/.cshrc have commands that produce extraneous output, which may confuse sftp.

http://www.openssh.org/faq.html#2.9

If 'ssh /usr/bin/true' returns any output, please modify $HOME/.cshrc until it does not.

Re: PAM Authentication error

Kathy McGohan_1 — Mon, 18 Apr 2005 15:16:54 GMT

Ermin, we're working on the suggestion you made. We are making some progress. We are down to 1 error message, "pam_authenticate: error No account present for user". Hopefully we will get this solved. Thanks for your help.