#621 sshd exited with code 11 in 0.7RC1

[MaxMyg]

Sorry for bad English? I am from Russia :-)
When I try to use authentication via Active Directory for SSH via winbindd, sshd is exited with code 11. Password authentication via winbindd PAM is successfull, in logs I can see that username and password ia accepted but then sshd is crashed. In FreeNAS 0.69 (stable) the same configuration is working fine.

[Volker]

Seems to be a bug in sshd. Can you do some test please, maybe we get some hints.
Please execute the following commands

freenas:~# ps ax | grep ssh
1606 ?? Ss 0:00.02 /usr/sbin/sshd -f /var/etc/ssh/sshd_config -h /var/etc/ssh/ssh_host_dsa_key
4477 ?? Ss 0:00.39 sshd: root@ttyp0 (sshd)
4483 p0 R+ 0:00.00 grep ssh
freenas:~# truss -p 1606

After that please try to authenticate via AD. Hopefully we will get some usefull informations that help to findout what is going wrong.

Regards
Volker

[MaxMyg]

Thank you for answer. I have tried to do all that you advise:
$ ps ax | grep ssh
1634 ?? Is 0:00.00 /usr/sbin/sshd -f /var/etc/ssh/sshd_config -h /var/et
1881 ?? S 0:00.01 sh -c ps ax | grep ssh
1883 ?? D 0:00.01 grep ssh
$ truss -p 1634
after command "truss" my freenas web gui is not answered, and I need to reboot system

[MaxMyg]

Jul 23 10:14:11 storage sshd[1634]: Server listening on :: port 22.
Jul 23 10:14:11 storage sshd[1634]: Server listening on 0.0.0.0 port 22.
Jul 23 10:17:36 storage sshd[2463]: SSH: Server;Ltype: Version;Remote: 192.168.1.105-35124;Protocol: 2.0;Client: OpenSSH_5.1p1 Debian-5ubuntu1
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_authenticate (flags: 0x0001)
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): getting password (0x00000009)
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): Verify user 'bakhur'
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): user 'bakhur' granted access
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): Returned user was 'bakhur'
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_authenticate returning 0
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): user 'bakhur' OK
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): user 'bakhur' granted access
Jul 23 10:17:40 storage sshd[2463]: Accepted password for bakhur from 192.168.1.105 port 35124 ssh2
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_setcred (flags: 0x0001)
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): PAM_ESTABLISH_CRED not implemented
Jul 23 10:17:40 storage sshd[2463]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_setcred returning 0
Jul 23 10:17:40 storage sshd[2513]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_setcred (flags: 0x0001)
Jul 23 10:17:40 storage sshd[2513]: pam_winbind(sshd): PAM_ESTABLISH_CRED not implemented
Jul 23 10:17:40 storage sshd[2513]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_setcred returning 0

[Lukas Gibb]

Hi guys,

Is there an ETA on when this will be fixed? I am also having problems and have tried both v 0.7.4944 and then rolled back to v 0.7.4919 (the latest "stable" version).

SSH works fine before joining to the domain but as soon as I join it we get the below output in the logs when logging in with a domain user (and cannot login with any other user. ie root, admin, Domain Admin etc etc).

I would really like this to work so that admin of the server is not troublesome in the future.

Jan 14 16:56:43 fatboy sshd[3502]: SSH: Server;Ltype: Version;Remote: 192.168.0.207-61046;Protocol: 2.0;Client: OpenSSH_5.2
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_authenticate (flags: 0x0001)
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): getting password (0x00000009)
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): Verify user 'userx'
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): user 'userx' granted access
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): Returned user was 'userx'
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_authenticate returning 0
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): user 'userx' OK
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): user 'userx' granted access
Jan 14 16:56:48 fatboy sshd[3502]: Accepted password for userx from 192.168.0.207 port 61046 ssh2
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_setcred (flags: 0x0001)
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): PAM_ESTABLISH_CRED not implemented
Jan 14 16:56:48 fatboy sshd[3502]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_setcred returning 0
Jan 14 16:56:48 fatboy sshd[3504]: pam_winbind(sshd): [pamh: 0x0x284092e0] ENTER: pam_sm_setcred (flags: 0x0001)
Jan 14 16:56:48 fatboy sshd[3504]: pam_winbind(sshd): PAM_ESTABLISH_CRED not implemented
Jan 14 16:56:48 fatboy sshd[3504]: pam_winbind(sshd): [pamh: 0x0x284092e0] LEAVE: pam_sm_setcred returning 0