From cravey@www.gotbrains.org  Sun Aug  4 11:24:21 2002
Return-Path: <cravey@www.gotbrains.org>
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0C1E037B446
	for <FreeBSD-gnats-submit@freebsd.org>; Sun,  4 Aug 2002 11:24:18 -0700 (PDT)
Received: from www.gotbrains.org (www2.gotbrains.org [206.180.149.129])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8E90E43E65
	for <FreeBSD-gnats-submit@freebsd.org>; Sun,  4 Aug 2002 11:24:17 -0700 (PDT)
	(envelope-from cravey@www.gotbrains.org)
Received: from www.gotbrains.org (localhost [127.0.0.1])
	by www.gotbrains.org (8.12.3/8.12.3) with ESMTP id g74IOFo9035903
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 4 Aug 2002 13:24:15 -0500 (CDT)
	(envelope-from cravey@www.gotbrains.org)
Received: (from cravey@localhost)
	by www.gotbrains.org (8.12.3/8.12.3/Submit) id g74IOFWW035902;
	Sun, 4 Aug 2002 13:24:15 -0500 (CDT)
Message-Id: <200208041824.g74IOFWW035902@www.gotbrains.org>
Date: Sun, 4 Aug 2002 13:24:15 -0500 (CDT)
From: Stephen Cravey <cravey@gotbrains.org>
Reply-To: Stephen Cravey <cravey@gotbrains.org>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: skey decrementing but not authorizing with ssh
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         41327
>Category:       bin
>Synopsis:       skey decrementing but not authorizing with ssh
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    jon
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Aug 04 11:30:00 PDT 2002
>Closed-Date:    Tue Aug 30 10:14:06 GMT 2005
>Last-Modified:  Tue Aug 30 10:14:06 GMT 2005
>Originator:     Stephen Cravey
>Release:        FreeBSD 4.6.1-RELEASE-p7 i386
>Organization:
>Environment:
System: FreeBSD ************* 4.6.1-RELEASE-p7 FreeBSD 4.6.1-RELEASE-p7 #0: Fri Aug 2 18:21:23 CDT 2002 cravey@***********/usr/obj/usr/src/sys/********* i386


	
>Description:
	After upgrading to 4.6.1, an attempt to ssh into the machine (ssh localhost) is met with problems.
	When you enter an incorrect skey password, a permission denied error is displayed as it should and the skey sequence number stays the sanme. When a CORRECT skey password is entered, permission is denied and the skey sequence number is DECREMENTED. I'm using the default pam.conf from the 4.6.1 p7 install. (Yes I ran mergemaster, yes I rebooted) This presents a problem because you cannot use skey for ssh logins and the sequence # will continue to decrement until it goes negative. Yes, it goes down to '-1'. This may or may not be another problem. Logins can still be made with your normal password, but that's not useful if you're using a system that logs keystrokes.

>How-To-Repeat:
	run keyinit
	run key
	attempt to ssh into the machine


cravey:~ $ ssh localhost
s/key 94 ww09087
Password:
Permission denied, please try again.
s/key 93 ww09087
Password:
Permission denied, please try again.
s/key 92 ww09087
Password:
cravey@localhost's password:

>Fix:
	Use telnet, but that kindof defeats the whole purpose, doesn't it.


>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: jon 
State-Changed-When: Mon Aug 12 11:14:02 PDT 2002 
State-Changed-Why:  
awaiting user feedback 


Responsible-Changed-From-To: freebsd-bugs->jon 
Responsible-Changed-By: jon 
Responsible-Changed-When: Mon Aug 12 11:14:02 PDT 2002 
Responsible-Changed-Why:  
awaiting user feedback 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 
State-Changed-From-To: feedback->feedback timeout 
State-Changed-By: matteo 
State-Changed-When: Tue Aug 30 10:13:30 GMT 2005 
State-Changed-Why:  


http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 
State-Changed-From-To: feedback->closed 
State-Changed-By: matteo 
State-Changed-When: Tue Aug 30 10:13:51 GMT 2005 
State-Changed-Why:  
feedback timeout 

http://www.freebsd.org/cgi/query-pr.cgi?pr=41327 
>Unformatted:
