misc/107154: pam.d/sshd pam_ssh.so doesn't start ssh-agent

Stefan Thurner thurners at nicsys.de
Sat Dec 23 13:30:16 PST 2006


>Number:         107154
>Category:       misc
>Synopsis:       pam.d/sshd pam_ssh.so doesn't start ssh-agent
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Dec 23 21:30:15 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Stefan Thurner
>Release:        FreeBSD  6.2-PRERELEASE
>Organization:
>Environment:
FreeBSD xris.fu41.vpn 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Wed Nov 15 22:26:31 CET 2006     root at xris.fu41.vpn:/usr/obj/usr/src/sys/CUSTOM  i386
>Description:
What I want is that ssh-agent is started on the remote host if I login on the
remote host. Therefore I added the following lines to pam.d/sshd
file on the remote host.

auth            optional        pam_ssh.so              no_warn try_first_pass
session         optional        pam_ssh.so

If I login on the remote host the password for ssh-key is requested (as
it should) but no ssh-agent is started (even if type in the correct ssh passphrase). I'm quite sure that it is a bug
in pam_ssh.so.
>How-To-Repeat:
Add the described lines to pam.d/sshd on a remote host. Export your public ssh key to the remote host and login on the remote host. See if ssh-agent is started and serving your passphrase (ssh-add -l).
>Fix:
Sorry, no idea.
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list