Security Incidents mailing list archives

Re: sshd: PAM pam_set_item: NULL pam handle passed


From: Matt Zimmerman <mdz () csh rit edu>
Date: Fri, 8 Mar 2002 19:04:15 -0500

On Fri, Mar 08, 2002 at 06:30:46PM -0500, Chris Faulhaber wrote:

On Thu, Mar 07, 2002 at 10:29:32PM -0500, Matt Zimmerman wrote:
Mar  7 21:50:22 mizar sshd[15396]: PAM pam_set_item: NULL pam handle passed

This can happen if someone ssh's to a machine then ^C's out of ssh
when asked for the password.  I see this on FreeBSD 4.x (whose PAM
implementation is based on LinuxPAM):

Mar  8 18:27:08 merlin sshd[34674]: pam_set_item: NULL pam handle passed

Interesting...I can't reproduce this using that exact method, though.  If I
interrupt (or send a SIGTERM to) the ssh client while it is waiting for a
password, I just get:

Mar  8 19:02:50 mizar sshd[7895]: Connection closed by 127.0.0.1

It could be something similar (or related to RSA authentication).

-- 
 - mdz

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: