1820710 Members
2922 Online
109627 Solutions
New Discussion юеВ

PAM Authentication error

 
Kathy McGohan_1
Frequent Advisor

PAM Authentication error

We have a rp7410 running HP-UX 11.0. The application is DEBX. When one of our accounts login to this system using sftp (has a shell, csh), we get the following error messages in our syslog.log file:
*********************************************
tadhp3 sshd[23495]: Pam_authenticate: error Authentication failed
tadhp3 sshd[23274]: error: PAM: Authentication failed for ts-trail from rally.doup.dla.mil
tadhp3 sshd[23515]: pam_authenticate: error Authentication failed
tadhp3 sshd[23274]: Accepted password for ts-trail from 121.40.32.100 port 3459 ssh2
tadhp3 sshd[23550]: subsystem request for sftp
tadhp3 sshd[23550]: pam_setcred: error Authentication failed
tadhp3 syslog: pam_authenticate: error No account present for user
*********************************************
The account is defined right in the password file and the user does get into the system without any problem. We have other sftp accounts coming into this server and we do not get any error messages, but their accounts are defined with /bin/false in the password file. The only sftp accounts which reports the error messages above have /usr/bin/csh defined in the password file. Would appreciate help on solving all these error messages from coming out in the syslog file.
4 REPLIES 4
RAC_1
Honored Contributor

Re: PAM Authentication error

In sshd_config, is PAM set to yes??
Is the account locked??

Anil
There is no substitute to HARDWORK
Kathy McGohan_1
Frequent Advisor

Re: PAM Authentication error

Yes PAM is set to yes
UsePAM yes
The user's account is not locked - he is able to get into this system.
Anymore ideas?
Ermin Borovac
Honored Contributor

Re: PAM Authentication error

sftp may fail if $HOME/.cshrc have commands that produce extraneous output, which may confuse sftp.

http://www.openssh.org/faq.html#2.9

If 'ssh /usr/bin/true' returns any output, please modify $HOME/.cshrc until it does not.
Kathy McGohan_1
Frequent Advisor

Re: PAM Authentication error

Ermin, we're working on the suggestion you made. We are making some progress. We are down to 1 error message, "pam_authenticate: error No account present for user". Hopefully we will get this solved. Thanks for your help.