topic Re: SSH password problems in Operating System - HP-UX

SSH password problems

Rainer von Bongartz — Fri, 29 Oct 2004 04:46:02 GMT

I' am using Secure shell : A.03.81.002

login works find using ssh and PUTTY client.

If user changes his password, the change succeeds but on next (ssh) logon user is rejected:

Failed password for from A.B.C.D port 3000 ssh2

A telnet logon with new passowrd works find !!!

Any ideas (I have absolutely none)

Regards
Rainer

Re: SSH password problems

Hoang Chi Cong_1 — Fri, 29 Oct 2004 05:23:41 GMT

Hello Rainer von Bongartz

It seems strange.
You can check and looking for more in this website:
http://www.ssh.com/support/downloads/secureshellserver/updates-and-packages-3-1.html
It is a good site talking about SSH.

Hope this helps
Regard,
Jimkery

Re: SSH password problems

RAC_1 — Fri, 29 Oct 2004 06:16:42 GMT

Lets see what we can do.
start a new sshd.
sshd -ddd -p "some_other_port"

Try connecting and post

Re: SSH password problems

Rainer von Bongartz — Fri, 29 Oct 2004 06:29:06 GMT

here's the output of the connect

User can definitly logon on telnet prot with this password

Rainer

Re: SSH password problems

Rainer von Bongartz — Fri, 29 Oct 2004 06:33:10 GMT

btw. problems seems to arise after upgrading from

HP-UX Secure Shell A.03.61.002
to
HP-UX Secure Shell A.03.81.002

Re: SSH password problems

RAC_1 — Fri, 29 Oct 2004 07:01:24 GMT

On ssh server, check sshd_config file.
Is PAM setting set to yes?? If not set it and try.
Post the results.

Anil

Re: SSH password problems

Rainer von Bongartz — Fri, 29 Oct 2004 07:26:56 GMT

Got it:

specification in /etc/default/security

MIN_PASSWORD_LENGTH=8

if you now change your password to 9 characters you cannot log in using ssh but still logon on telnet port using this 9-character password.

I see no reason for this behaviour as MIN_PASSWORD_LENGTH specifies a minimum password length and not a maximum password length !!!

Also I don't see the reason for the different behaviour of ssh and telnet.

Perhaps somebody could shed some light on this ??

Regards
Rainer

Re: SSH password problems

Jeffrey Heneks_2 — Wed, 17 Nov 2004 10:19:09 GMT

I am having the same problem. Does anyone have a solution? The only difference in my situation is that I have not changed the Minimum password length paramater. A nine character password will fail for ssh, but work fine for telnet.

Re: SSH password problems

Jordan Bean — Wed, 17 Nov 2004 19:41:21 GMT

Trusted Mode, ShadowPasswords, or standard? I want to know where to concentrate.

Re: SSH password problems

Bill Hassell — Wed, 17 Nov 2004 21:37:09 GMT

This likely a standard system (ie, not Trusted). The problem is that the MAXIMUM password for allowed for a non-Trusted system is 8 characters. If you create or type a password with 9 characters, the extra character(s) will be ignored. Technically, that's not a desirable behavior and it does not match ssh which will try to match a 9 character encryption to an 8 character encryption (and always fails). Bottom line: To avoid compatibility issues, never use more than 8 characters for a non-Trusted system password.