ssh problem with ADMCHG

[unixfreak]

Hi all, Google doesn't give me much that I can see about this, I installed OpenSSH 5.0r1 from Sourceforge on 5.2 but setting the ADMCHG flag on users causes them to be kicked after it accepts their password and I get this in the log:

Apr 2 07:58:41 wbis104p sshd[905430]: fatal: Couldn't wait for child: There are no child processes.

The never get prompted for changing their password, I assume whatever process spawns to do that can't start? Anyone ever seen this?

Thanks,
Henrik Morsing

 

[unixfreak]

If I run debug I get:

debug1: session_input_channel_req: session 0 req shell
setsid: Operation not permitted.
debug1: Received SIGCHLD.

 

[victorv]

hi,
are you able to login, for a same user, from a normal telnet session, or doing a
login suchuser
from a terminal from your admin console ?
bye
vic

 

[unixfreak]

Yes, everything else works fine. I'm more and more convinced this is a bug in OpenSSH 5.0 from Sourceforge. Anyone here got it to work? What's the fix?

Thanks
Henrik

 

[victorv]

hi,
On AIX 4.3 I needed look for ssh from strange sites.
In AIX 5, I install ssh, I don't remember exactly from where, but sure from CD that come with AIX.
bye
vic

 

[unixfreak]

uhh yes, IBM's supplied OpenSSH works but I'm after something a bit newer. But thanks.

 

[unixfreak]

So what's the deal with you guys? You all use telnet? Or do you stick with version 3.7 that IBM supplies with AIX?

 

[p5wizard]

No AIX 5.2 anymore...

on AIX 5.3:
[tt] openssh.base.client 4.3.0.5300 C F Open Secure Shell Commands
openssh.base.server 4.3.0.5300 C F Open Secure Shell Server
openssh.license 4.3.0.5300 C F Open Secure Shell License
openssh.msg.en_US 4.3.0.5300 C F Open Secure Shell Messages -
U.S. English
openssl 0.9.7g-1 C R Secure Sockets Layer and
cryptography libraries and
tools (/bin/rpm)

$ ssh -V
OpenSSH_4.3p2, OpenSSL 0.9.7g 11 Apr 2005[/tt]



HTH,

p5wizard

 

[unixfreak]

4.3 has some nasty security issues. Normally I'd recommend upgrading to 5.0 at least but it doesn't bloody work. 4.7 works though, if you want to get that. I'll have a look at the 5.0 code if I get time over the weekend but I'm no coder so probably won't get far.

Thanks

 

[ogniemi]

did you try this?

http://home.zipworld.com.au/~dtucker/openssh/

 

[unixfreak]

I read through that page, yes, and there was no mention of this issue in versions later than 3.8. I see no reason the 5.0 would be any different on that page to the Sourceforge page unless you have tried it and can tell me different?

I suppose I should try it then

Thanks

 

[unixfreak]

Thanks ogniemi, that one seems to work, at least on my home box. Will try it at work on Monday