Re: recent openssh import seems to break sshd

[Thomas Klausner <wiz%gatalith.at@localhost>]

On Wed, Jul 10, 2024 at 01:07:53PM +0200, Markus Kilbinger wrote:
> Since about
> 
>   https://mail-index.netbsd.org/source-changes/2024/07/08/msg152310.html
> 
> resulting sshd fails to accept connections (on my aarch64 machines):
> 
> Jul 10 07:49:01 m1 sshd-session[15932]: SSH: Server;Ltype: Kex;Remote:
> fd00::5;Enc: chacha20-poly1305%openssh.com@localhost;MAC: (null);Comp: none
> [preauth]
> Jul 10 07:49:02 m1 sshd-session[15932]: SSH: Server;Ltype:
> Authname;Remote: fd00:6;Name: user [preauth]
> Jul 10 07:49:02 m1 sshd-session[15932]: fatal: sshpam_init: internal
> error: NULL PAM service name
> 
> Is anybody else seeing this?

martin@ filed a bug report which looks quite similar, with a workaround.
 Thomas

--- Begin Message ---

• To: gnats-admin%netbsd.org@localhost,netbsd-bugs%netbsd.org@localhost
• Subject: bin/58412: ssh update breaks sshd
• From: martin%NetBSD.org@localhost
• Date: Wed, 10 Jul 2024 09:45:00 +0000 (UTC)

>Number:         58412
>Category:       bin
>Synopsis:       ssh update breaks sshd
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jul 10 09:45:00 +0000 2024
>Originator:     Martin Husemann
>Release:        NetBSD 10.99.11
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD out-of-the-silent-planet.aprisoft.de 10.99.11 NetBSD 10.99.11 (GENERIC64) #451: Wed Jul 10 10:14:12 CEST 2024 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src/sys/arch/evbarm/compile/GENERIC64 evbarm
Architecture: aarch64
Machine: evbarm
>Description:

After updating this machine to -current I couldn't log in via ssh any more:

sshd-session[1709]: fatal: sshpam_init: internal error: NULL PAM service name

My /etc/pamd.d is identical to the distributed version.

>How-To-Repeat:

Update a working machine to current, try to log in via ssh.

Setting UsePAM=no in /etc/ssh/sshd_config and restarting sshd works around it.

>Fix:
n/a

--- End Message ---