Bug#860410: more testing
I just took a Jessie system with all updates applied and tested that I could
login with an as limit of 20000. I then configured apt for the stretch
repository and used apt to upgrade it:
# apt-get install openssh-server
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libssl1.0.2
openssh-client openssh-sftp-server ucf
Suggested packages:
krb5-doc krb5-user keychain libpam-ssh monkeysphere ssh-askpass molly-guard
rssh ufw
Recommended packages:
krb5-locales xauth libpam-systemd ncurses-term
The following NEW packages will be installed:
libssl1.0.2 ucf
The following packages will be upgraded:
libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 openssh-client
openssh-server openssh-sftp-server
7 upgraded, 2 newly installed, 0 to remove and 151 not upgraded.
Need to get 3159 kB of archives.
After this operation, 4455 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://mirror.internode.on.net/pub/debian/ stretch/main libssl1.0.2
amd64 1.0.2k-1 [1294 kB]
Get:2 http://mirror.internode.on.net/pub/debian/ stretch/main libgssapi-krb5-2
amd64 1.15-1 [154 kB]
Get:3 http://mirror.internode.on.net/pub/debian/ stretch/main libkrb5-3 amd64
1.15-1 [311 kB]
Get:4 http://mirror.internode.on.net/pub/debian/ stretch/main libk5crypto3
amd64 1.15-1 [119 kB]
Get:5 http://mirror.internode.on.net/pub/debian/ stretch/main libkrb5support0
amd64 1.15-1 [61.7 kB]
Get:6 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-sftp-
server amd64 1:7.4p1-10 [39.5 kB]
Get:7 http://mirror.internode.on.net/pub/debian/ stretch/main ucf all 3.0036
[70.2 kB]
Get:8 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-server
amd64 1:7.4p1-10 [332 kB]
Get:9 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-client
amd64 1:7.4p1-10 [777 kB]
Fetched 3159 kB in 1s (1666 kB/s)
Preconfiguring packages ...
Selecting previously unselected package libssl1.0.2:amd64.
(Reading database ... 10729 files and directories currently installed.)
Preparing to unpack .../libssl1.0.2_1.0.2k-1_amd64.deb ...
Unpacking libssl1.0.2:amd64 (1.0.2k-1) ...
Preparing to unpack .../libgssapi-krb5-2_1.15-1_amd64.deb ...
Unpacking libgssapi-krb5-2:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ...
Preparing to unpack .../libkrb5-3_1.15-1_amd64.deb ...
Unpacking libkrb5-3:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ...
Preparing to unpack .../libk5crypto3_1.15-1_amd64.deb ...
Unpacking libk5crypto3:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ...
Preparing to unpack .../libkrb5support0_1.15-1_amd64.deb ...
Unpacking libkrb5support0:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ...
Preparing to unpack .../openssh-sftp-server_1%3a7.4p1-10_amd64.deb ...
Unpacking openssh-sftp-server (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ...
Selecting previously unselected package ucf.
Preparing to unpack .../archives/ucf_3.0036_all.deb ...
Moving old data out of the way
Unpacking ucf (3.0036) ...
Preparing to unpack .../openssh-server_1%3a7.4p1-10_amd64.deb ...
Unpacking openssh-server (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ...
Preparing to unpack .../openssh-client_1%3a7.4p1-10_amd64.deb ...
Unpacking openssh-client (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ...
Processing triggers for libc-bin (2.19-18+deb8u7) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for systemd (215-17+deb8u6) ...
Setting up libssl1.0.2:amd64 (1.0.2k-1) ...
Setting up libkrb5support0:amd64 (1.15-1) ...
Setting up libk5crypto3:amd64 (1.15-1) ...
Setting up libkrb5-3:amd64 (1.15-1) ...
Setting up libgssapi-krb5-2:amd64 (1.15-1) ...
Setting up openssh-client (1:7.4p1-10) ...
Installing new version of config file /etc/ssh/moduli ...
Installing new version of config file /etc/ssh/ssh_config ...
Setting up openssh-sftp-server (1:7.4p1-10) ...
Setting up ucf (3.0036) ...
Setting up openssh-server (1:7.4p1-10) ...
Installing new version of config file /etc/init.d/ssh ...
Installing new version of config file /etc/init/ssh.conf ...
Installing new version of config file /etc/network/if-up.d/openssh-server ...
Processing triggers for libc-bin (2.19-18+deb8u7) ...
Processing triggers for systemd (215-17+deb8u6) ...
#
After that I can't login to the account with an as limit set.
Then I reverted to an earlier snapshot of that VM and upgraded just libgssapi-
krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 and restarted sshd, that still
let me login with an as limit of 20000 so the issue is clearly in sshd not in
libraries it uses.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
Reply to: