topic Password SSH in Operating System - Linux

Password SSH

Rafael Casero — Mon, 10 Oct 2005 07:58:34 GMT

I'm currently using "putty" connecting SSH w/ RedHat 3.0 Ent. When I expired the usrs password with the following command.

chage -d 0 "username"

When I connect with "putty" I get the login prompt when my temp password is entered it just closes my session. I have edited the sshd_config file

#UsePrivilegeSeparation no

HELP...

Ralph.

Re: Password SSH

Ivan Ferreira — Mon, 10 Oct 2005 08:45:26 GMT

It seems that it's a bug, see:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124602

http://rhn.redhat.com/errata/RHSA-2005-106.html

Re: Password SSH

Steven E. Protter — Mon, 10 Oct 2005 08:46:08 GMT

put up the rest of that config file.

on the console

tail -f /var/log/messages

try a log on.

post the output that appends to the end of your log.

SEP

Re: Password SSH

Rafael Casero — Mon, 10 Oct 2005 08:50:00 GMT

[root@avm_gnvlx02 ssh]# tail -f /var/log/messages
Oct 9 04:02:25 avm_gnvlx02 syslogd 1.4.1: restart.
Oct 10 08:29:21 avm_gnvlx02 passwd(pam_unix)[14376]: password changed for ralph
Oct 10 08:31:23 avm_gnvlx02 sshd(pam_unix)[14399]: expired password for user ral ph (root enforced)
Oct 10 08:31:23 avm_gnvlx02 sshd(pam_unix)[14401]: session opened for user ralph by (uid=505)
Oct 10 08:31:24 avm_gnvlx02 sshd(pam_unix)[14401]: session closed for user ralph
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14403]: expired password for user ral ph (root enforced)
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14405]: session opened for user ralph by (uid=505)
Oct 10 08:32:38 avm_gnvlx02 sshd(pam_unix)[14405]: session closed for user ralph
Oct 10 08:34:17 avm_gnvlx02 sshd(pam_unix)[14407]: session opened for user root by (uid=0)
Oct 10 08:34:38 avm_gnvlx02 sshd(pam_unix)[14407]: session closed for user root

Re: Password SSH

Ivan Ferreira — Mon, 10 Oct 2005 17:05:57 GMT

One more thing, the "UsePrivilegeSeparation no" must be uncommented. If it's commented, it gets the default "yes" and won't work.

Re: Password SSH

Gopi Sekar — Tue, 11 Oct 2005 02:01:07 GMT

From the log messages it is clear that SSHD is deniying logon connections with expired passwords.

Why do you want to achieve this? If you let us know the purpose then it may be possible to fine tune it or come up with a better suggestion.

Gopi

Re: Password SSH

Andrew Cowan — Tue, 11 Oct 2005 02:22:04 GMT

Try chage -d -1 "username" to disable the password ageing on this account. I think that "-d 0" does not work as the RedHat documentation suggests.

Re: Password SSH

Rafael Casero — Tue, 11 Oct 2005 06:50:19 GMT

I have several users that need to get created, and I would need them to change the password upon logging in for the first time.

Re: Password SSH

Rafael Casero — Tue, 11 Oct 2005 07:23:43 GMT

Ivan, this did the trick I uncommented it and bingo it worked..

Thanks everyone for the support.

Ralph.