Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Jun 2001 08:52:10 -0700 (PDT)
From:      Matt Dillon <dillon@earth.backplane.com>
To:        Brian Dean <bsd@bsdhome.com>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Patch for PAM/ssh problem (was Re: sshd failing with: 'fatal: PAM setcred failed[6]: Permission denied')
Message-ID:  <200106111552.f5BFqAB20461@earth.backplane.com>
References:   <20010611105748.A14299@vger.bsdhome.com>

next in thread | previous in thread | raw e-mail | index | archive | help
:Hi,
:
:After updating yesterday from about a week before, sshd won't let
:me login, reporting:
:
:  sshd[14238]: Accepted rsa for bsd from xx.xx.xx.xx port 1243
:  sshd[14238]: fatal: PAM setcred failed[6]: Permission denied
:
:My /etc/pam.conf is rev 1.6.2.6 and hasn't been changed.  Also,
:my sshd_config file has not been altered either.  I did a
:mergemaster as part of the update.
:
:This was working just fine about a week ago.  Any ideas?
:
:[If this is old news, I apologize, the -stable archives appear to
:be down at the moment so I can't search.]
:
:Thanks,
:-Brian

    The below patch should temporarily solve the problem until the
    bright boys that broke ssh and/or pam figure out the correct
    fix.  Patch the file in contrib as shown and then do:

	cd /usr/src/lib/libpam
	make
	make install

    Then restart sshd and you are done.


						-Matt

Index: pam_dispatch.c
===================================================================
RCS file: /home/ncvs/src/contrib/libpam/libpam/pam_dispatch.c,v
retrieving revision 1.1.1.1.6.1
diff -u -r1.1.1.1.6.1 pam_dispatch.c
--- pam_dispatch.c	2001/06/07 09:07:32	1.1.1.1.6.1
+++ pam_dispatch.c	2001/06/09 21:48:20
@@ -270,7 +270,7 @@
 	break;
     case PAM_SETCRED:
 	h = pamh->handlers.conf.setcred;
-	use_cached_chain = 1;
+	use_cached_chain = 0;
 	break;
     case PAM_ACCOUNT:
 	h = pamh->handlers.conf.acct_mgmt;

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106111552.f5BFqAB20461>