ICE

Please login or register.

Login with username, password and session length
Advanced search  

News:

ICETCP.PRO and ICETCP.PLUS are compatible with Windows 11!

Author Topic: SSH password change failure  (Read 3795 times)

jaredh

  • Jr. Member
  • **
  • Posts: 7
SSH password change failure
« on: July 28, 2015, 01:28:26 pm »

We have been working with your office to get a newer version of Dejawin to test SSH connections and had no success getting past SSH password changes.  It appears Dejawin cannot handle the change challenge coming from Linux or HP-UX (OpenSSH).  There is documentation suggesting this was fixed in a recent version, but no version we have been able to test with (including 4.4) will get beyond this issue.

It appears it recognizes the password should be changed, but rather than presenting any dialogue to change it, it presents an Access Denied box followed by an SSH Connection Failed box and terminates the window.  On the server, the ssh daemon only sees Dejawin terminating the socket. 

From trace logs from a different emulator, I can see the last message sent from the server is as follows:

Incoming packet #0x7, type 60 / 0x3c (SSH2_MSG_USERAUTH_INFO_REQUEST)
  00000000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01  ................
  00000010  00 00 00 40 50 61 73 73 77 6f 72 64 20 63 68 61  ...@Password cha
  00000020  6e 67 65 20 72 65 71 75 65 73 74 65 64 2e 20 43  nge requested. C
  00000030  68 6f 6f 73 65 20 61 20 6e 65 77 20 70 61 73 73  hoose a new pass
  00000040  77 6f 72 64 2e 0a 4f 6c 64 20 50 61 73 73 77 6f  word..Old Passwo
  00000050  72 64 3a 20 00                                   rd: .


I cannot recreate this with the version of Putty Dejawin claims it is using (53b).  All the versions of Dejawin we have been given to test stop with Putty 53b.  Note there is a reference to a potential SSH password issue in putty that was fixed in version 59 of putty (http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ssh2-password-expiry.html)
Logged

jaredh

  • Jr. Member
  • **
  • Posts: 7
Re: SSH password change failure
« Reply #1 on: July 30, 2015, 11:11:34 am »

For future reference, this is caused by a sshd_config setting that is now default on all SSH distros.

The PasswordAuthentication is set to NO but must be set to YES for Dejawin to properly change passwords.  It does not affect logging in regularly, only the challenge response interactions during password change.  Setting this from no to yes allows the password changes without issue.
Logged

Bob

  • Administrator
  • Ice Artist
  • *****
  • Posts: 1607
Re: SSH password change failure
« Reply #2 on: August 31, 2015, 02:20:16 pm »

For future reference, this is caused by a sshd_config setting that is now default on all SSH distros.

The PasswordAuthentication is set to NO but must be set to YES for Dejawin to properly change passwords.  It does not affect logging in regularly, only the challenge response interactions during password change.  Setting this from no to yes allows the password changes without issue.
Thanks for letting us know.
Logged
 

Page created in 0.012 seconds with 21 queries.