topic Re: SSH never resets login fails in Operating System - OpenVMS

SSH never resets login fails

Edwin Gersbach_2 — Fri, 10 Sep 2004 03:19:22 GMT

We encounter the fact that when someone tries to login with a wrong password using SSH, the image TCPIP$SSH_SSHD2.EXE running under the account TCPIP$SSH counts a login failure for the user. However, upon a successfull login, the failure count does not get reset.

As we have several users which only log in using SSH, their counter just goes up.

Is this a known bug?

This is with VMS V7.3-1 (with all current patches) and TCPIP V5.4-ECO1

Edwin

Re: SSH never resets login fails

Willem Grooters — Fri, 10 Sep 2004 04:47:42 GMT

Did you install the lasetst SSH software? There _are_ some issues - at least, there were in that past. It might be that this is one of them.

It's also a possibility that this is a feature of SSH - which is in origin (and current behaviour) a Unix application. So I wouldn't be too surprised if this is a relict of the Unix implementation.

Willem

Re: SSH never resets login fails

Wim Van den Wyngaert — Fri, 10 Sep 2004 05:34:13 GMT

Just tried the same action with rlogin of tcp 5.3. The reset isn't done either.

Wim

Re: SSH never resets login fails

Wim Van den Wyngaert — Fri, 10 Sep 2004 05:36:46 GMT

Telnet however does clear it. And LAT too.

Wim

Re: SSH never resets login fails

Ian Miller. — Fri, 10 Sep 2004 05:39:43 GMT

TCPIP V5.4-ECO2 is now available with lots of updates for SSH so it may help however I did not see anything corresponding to your problem in the release notes.

Re: SSH never resets login fails

Edwin Gersbach_2 — Fri, 10 Sep 2004 06:33:38 GMT

Thanks for all the information. I will wait for TCPIP ECO2 to get installed (not my decision) and check again. If the problem persists I will see what a escalation through the official channels reveals.

Re: SSH never resets login fails

Edwin Gersbach_2 — Thu, 20 Apr 2006 01:58:11 GMT

I missed to close this thread.

Meanwhile we are on ECO5 and the problem is still there. We will soon upgrade to V5.5-ECO1 but I doubt that it will change anything. We are going to escalate through the official channels.

Edwin