Need PAM modules for Openssh to work...

[Adrian Pillai_1]

Hi Guys,
I'm running HPUX 11.00, and using latest version of OpenSSH.
When I try to ssh in, I get "PAM session setup failed[33]: General Commercial Security error "
I already set UsePrivilegeSeparation no
In /usr/lib/security I only have libpam_unix.1 and libpam_updbe.1, and I think that is the issue.
Most postings I read point to the need for a pam_unix.so.
Am I on the right track?
If so, where do I get a pam_unix.so binary?

[Ollie R]

Hi,

See if the "syslog.log" on either end of the connection gives you any more clues.

Also, try running "ssh" with the "-v" option.

Check the permissions of your ".ssh" directory and files in there (directory should be 600 mode and owned by the user; files should be 400 mode and, again, owned by the user).

Also check the permissions of your "sshd_config", "ssh_config", "ssh_known_hosts" and other config files, make sure the security is tight enough (no more than 644).

Ollie.

[Adrian Pillai_1]

Thx, I've already tried all those options, but from looking at the syslogs on the destination server, it seems to point to PAM as the problem.....

[Sridhar Bhaskarla]

Hi,

It's a PAM problem but not on the HP's side. You will need to patch openssh code to handle PAM. Do not touch anything in the pam.conf on the server side.

Look at my following posting and the patch. It should take care of your issue.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xcd3deea29889d611abdb0090277a778c,00.html

If you have a choice, install HP's version of ssh. You do not need to worry about these headaches.

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

-Sri

[Adrian Pillai_1]

Sridhar,
Thx, that was it.

If you can provide some clear text explanation as to what the issue and solution was, I will really appreciate it.

Adrian