authpf won't work as a shell with ssh

NAVIGATION

CATEGORIES

REFERRENCE

If you have some good idea, Cilck and mail to us please...

LINKS

Home » BSD

authpf won't work as a shell with ssh
5 answers - 1186 bytes -
I can't imagine what simple thing I'm leaving out.
When ever I try to ssh to an account with the shell set to /usr/sbin/authpf
I get disconnected immediately after getting the motd. I know I'm
connecting and authenticating, but I don't stay connected.
I've created the files
authpf.allow authpf.conf authpf.message authpf.problem authpf.rules
in /etc/authpf ro to all but root.
authpf.allow contains a single "*"
authpf.conf is empty
authpf.rules contains:
pass in quick on $IN_IF from $user_ip to any keep state
pass out quick on $IN_IF from $user_ip to any keep state
pass in quick on $EX_IF from $user_ip to any keep state
pass out quick on $EX_IF from $user_ip to any keep state
I've put the anchors in the main pf ruleset and they load without any
errors.
nat-anchor "authpf/*"
rdr-anchor "authpf/*"
binat-anchor "authpf/*"
anchor "authpf/*"
other related issue. If I use the adduser script and specify authpf
as the shell, I get "authpf: is not allowed!". I've used vipw to change
the shell to /usr/sbin/authpf for the test user.
Thank you.
No.1 | | 282 bytes | |
Sat, Jul 08, 2006 at 06:24:40PM -0700, Bill Meigs wrote:
other related issue. If I use the adduser script and specify authpf
as the shell, I get "authpf: is not allowed!". I've used vipw to change
the shell to /usr/sbin/authpf for the test user.
man shells(5)?
No.2 | | 581 bytes | |
Jul 8, 2006, at 8:49 PM, Bill Meigs wrote:

Thanks. That fixed the adduser script issue, but I still get
disconnected immediately.
Read the authpf portion of the FAQ. It's in there.

Darrin Chandler wrote:
>Sat, Jul 08, 2006 at 06:24:40PM -0700, Bill Meigs wrote:
other related issue. If I use the adduser script and specify
authpf as the shell, I get "authpf: is not allowed!". I've used
vipw to change the shell to /usr/sbin/authpf for the test user.
>man shells(5)?
>
No.3 | | 453 bytes | |
Thanks. That fixed the adduser script issue, but I still get
disconnected immediately.

Darrin Chandler wrote:
Sat, Jul 08, 2006 at 06:24:40PM -0700, Bill Meigs wrote:
>other related issue. If I use the adduser script and specify authpf
>as the shell, I get "authpf: is not allowed!". I've used vipw to change
>the shell to /usr/sbin/authpf for the test user.

man shells(5)?
No.4 | | 877 bytes | |
The only relevant point I could see in the faq is the for
/etc/authpf/authpf.conf to exist and it does. It is empty.
Is there another reason I'm overlooking?

Ray Percival wrote:
Jul 8, 2006, at 8:49 PM, Bill Meigs wrote:

>Thanks. That fixed the adduser script issue, but I still get
>disconnected immediately.
Read the authpf portion of the FAQ. It's in there.
>>
>Darrin Chandler wrote:
Sat, Jul 08, 2006 at 06:24:40PM -0700, Bill Meigs wrote:
other related issue. If I use the adduser script and specify
authpf as the shell, I get "authpf: is not allowed!". I've used vipw
to change the shell to /usr/sbin/authpf for the test user.
man shells(5)?
>>
No.5 | | 730 bytes | |
# ls -l /etc/authpf/
total 20
-rw-r 1 root wheel 2 Nov 20 2005 authpf.allow
-rw-r 1 root wheel 0 Nov 20 2005 authpf.conf
-rw-r 1 root wheel 451 Nov 20 2005 authpf.message
-rw-r 1 root wheel 0 Nov 20 2005 authpf.rules
-rw-r 1 root wheel 1289 Nov 20 2005 authpf.rules.old
drwxr-xr-x 2 root wheel 512 Nov 20 2005 banned
drwxr-xr-x 5 root wheel 512 Nov 20 2005 users

That's from a working gateway. I suspect you may have a permissions
issue. In case you're wondering why my rules file has 0 size, it's
because I'm using the "<authpf_users>" table rather than loading 500
anchors. Depending on how busy your gateway gets, that could be a very
real concern.

CK

Re: authpf won't work as a shell with ssh

EMSDN.COM

It's a question for 'authpf won't work as a shell with ssh' under 'BSD'

BSD

authpf won't work as a shell with ssh