[7.0-Beta] can no longer ssh into just upgraded host

Dag-Erling Smørgrav des at des.no
Wed Oct 31 08:38:12 PDT 2007


Jeremy Chadwick <koitsu at FreeBSD.org> writes:
> Dag-Erling Smørgrav <des at des.no> wrote:
> > What makes you think it might be PAM-related?  They don't even get as
> > far as exchanging version strings.
> An old -stable post I read is what made me think it might be
> PAM-related:
>
> http://lists.freebsd.org/pipermail/freebsd-stable/2004-November/009414.html

The symptoms are completely different.

> I don't know what stage PAM is actually induced within sshd (are any
> PAM-related API calls done before version exchange, etc.).

No.  The client and server send their version string in plain text
immediately upon establishing a TCP connection.  PAM isn't initialized
until after they have agreed on algorithms and keys and decided which
authentication method to use.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-current mailing list