Re: OpenSSH with no prompts PAM auth fails.
Peter Gutmann <[email protected]> Fri, 03 Apr 2015 00:24:07 +1300
| Newsgroups | gmane.comp.encryption.cryptlib |
|---|---|
| Message-ID | <[email protected]> |
Stephen Hurd <[email protected]> writes: >It appears some OpenSSH servers now send a PAM auth request without any >prompts. This triggers an error from cryptlib. following is the level 3 >debug output from cryptlib on a refused connection, and I've attached a patch >against the latest non-beta release (3.4.2) that fixes it (basically allows >no prompts for PAM auth). Do you know if there's a publicly-available SSH server online somewhere that exhibits this problem? The SSH state machine is horribly complex, and before disabling some of the checking that cryptlib does I'd like to test it against an implementation that does this to try and constrain how liberal cryptlib gets in accepting what amounts to malformed input. Peter. _______________________________________________ Cryptlib mailing list [email protected] via Mail: [email protected] Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ http://news.gmane.org/gmane.comp.encryption.cryptlib Posts from non-subscribed addresses are blocked to prevent spam, please subscribe in order to post messages.