Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Secure Shell
not be logged out when I am forced to change password Apr 23 2008 03:35PM
Paolo Ranzanici (paolo ranzanici com) (1 replies)
Re: not be logged out when I am forced to change password Apr 24 2008 10:07PM
John Bailey (rekkanoryo rekkanoryo org) (1 replies)
Re: not be logged out when I am forced to change password May 08 2008 03:01PM
Paolo Ranzanici (paolo ranzanici com) (1 replies)
Re: not be logged out when I am forced to change password May 10 2008 01:26AM
Sengor (sengork gmail com)
I believe the issue/feature's also present in Sun's own SSH distribution.

I know exactly what you mean & it gets annoying the more times you see
it happen. I've never been able to find out as to why this happens,
seems there is no (even remote) parameter for setting anything that'd
affect this behaviour (perhaps something compiled in directly OR a
side side-effect of something else).

One thing to try is enabling sshd_conf's UseLogin & see if that helps
because I believe telnet uses login when you connect

On Fri, May 9, 2008 at 1:01 AM, Paolo Ranzanici <paolo (at) ranzanici (dot) com [email concealed]> wrote:
> thank you for your suggestion John but I tried and the problem is only
> with openssh: with telnet after I change my expired password (passwd
> -f LOGIN from root before log out and log in again), solaris 9 log me
> in
>
>
>
> 2008/4/25 John Bailey <rekkanoryo (at) rekkanoryo (dot) org [email concealed]>:
>>
>> Paolo Ranzanici wrote:
>> > Me and my colleagues manage near 250 solaris 8&9 servers with openSSH
>> > (different versions) and we would like that after we (and our users)
>> > are forced to change password (due to normal expiration) we would not
>> > be logged out but session remains up and logged in (in some of our
>> > systems this happens).
>> >
>> > which is the parameter to set and in which file?
>> >
>> > thank you
>>
>> I believe this is actually a PAM setting, not something configured specifically
>> in the sshd or ssh client. You would likely see the same issue logging in via
>> telnet or rsh when the password expires.
>>
>> John
>>
>>
>

--
_________________________________/ sengork.blogspot.com /¯¯¯¯

[ reply ]







 

Privacy Statement
Copyright 2007, SecurityFocus