On Fri, Mar 08, 2002 at 06:30:46PM -0500, Chris Faulhaber wrote: > On Thu, Mar 07, 2002 at 10:29:32PM -0500, Matt Zimmerman wrote: > > Mar 7 21:50:22 mizar sshd[15396]: PAM pam_set_item: NULL pam handle passed > > This can happen if someone ssh's to a machine then ^C's out of ssh > when asked for the password. I see this on FreeBSD 4.x (whose PAM > implementation is based on LinuxPAM): > > Mar 8 18:27:08 merlin sshd[34674]: pam_set_item: NULL pam handle passed Interesting...I can't reproduce this using that exact method, though. If I interrupt (or send a SIGTERM to) the ssh client while it is waiting for a password, I just get: Mar 8 19:02:50 mizar sshd[7895]: Connection closed by 127.0.0.1 It could be something similar (or related to RSA authentication). -- - mdz ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Sun Mar 10 2002 - 16:49:10 PST