PAM & ssh A.03.61.002

[Ruan_3]

Hi all

Since upgrading to ssh A.03.61.002, we have been having problems with our PAM NTLM authentication. When logging in via SSH, the following entry is written to the syslog:

Jan 20 13:19:26 sshd[28264]: pam_ntlm: Incorrect NT password for username : vtonder

This entry appears even before the password prompt is displayed. This is not a problem for
"normal" usage, because once one enters a valid NT password at the prompt, the incorrect password attempts is cleared. But I make use of keys and the ssh agent, and when logging on to several servers simultaneously or SFTP'ing a bunch of files via FileZilla, my NT account becomes locked. This happens when providing my NT password for the SFTP sessions.

Has anyone come across a similar problem? Any advice would be greatly appreciated. I hame included the contents of /etc/smb.conf:

dtaction auth required /usr/lib/security/libpam_unix.1
dtlogin auth required /usr/lib/security/libpam_unix.1
ftp auth required /usr/lib/security/libpam_unix.1
login auth required /usr/lib/security/libpam_unix.1
sshd auth required /usr/lib/security/libpam_ntlm.1
su auth required /usr/lib/security/libpam_unix.1
OTHER auth required /usr/lib/security/libpam_unix.1

[Ruan_3]

Someone please respond!

[Robert Binkhorst]

Hi,

Replace your currect OTHER statement with:
OTHER password required /usr/lib/security/libpam_unix.1

[Donny Jekels]

Try the follwoing in one of your tests.
modify the ssshd_config file.

look for an entry

UsePam yes
UseLogin yes

stay away from HP's port of a good thing.
compile OpenSSH and keep rocking...

swremove Bastile HpSureShell

good luck.

[Robert Binkhorst]

I disagree with Donny, not about the parameters, but about using HP's compilation of SSH. Unless you're using cutting edge technology which HP hasn't provided in their package you should use HP's version. Easy maintenance, HP releases patches, you save yourself the hassle of compiling this stuff.

Anyway, checking your config is always smart..

[Ruan_3]

Donny,

Should I set the parameters the values indicated? I changed the parameters to the values and restarted sshd, but I still get the same result.