Re: OpenSSH with no prompts PAM auth fails.

Peter Gutmann <[email protected]> Fri, 03 Apr 2015 00:24:07 +1300
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
Stephen Hurd <[email protected]> writes:

>It appears some OpenSSH servers now send a PAM auth request without any
>prompts.  This triggers an error from cryptlib.  following is the level 3
>debug output from cryptlib on a refused connection, and I've attached a patch
>against the latest non-beta release (3.4.2) that fixes it (basically allows
>no prompts for PAM auth).

Do you know if there's a publicly-available SSH server online somewhere that
exhibits this problem?  The SSH state machine is horribly complex, and before
disabling some of the checking that cryptlib does I'd like to test it against
an implementation that does this to try and constrain how liberal cryptlib
gets in accepting what amounts to malformed input.

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.