1 failure since last successful login

Talk about commercial or opensource products that already exist for OpenVMS or may be available in the future.
Post Reply

Topic author
afassl
Active Contributor
Posts: 27
Joined: Fri Jun 14, 2019 3:15 am
Reputation: 0
Status: Offline

1 failure since last successful login

Post by afassl » Thu May 04, 2023 2:26 am

Hi,

not sure, if this is category "Bug or Feature".

After logging via SSH I'm getting this:

Code: Select all

# ssh 192.168.140.75 -l system

 Welcome to OpenVMS (TM) x86_64 Operating System, Version E9.2-1  
system@192.168.140.75's password: 

    Last interactive login on Wednesday,  3-MAY-2023 17:11:58.23
    Last non-interactive login on Tuesday,  2-MAY-2023 17:04:01.25
    1 failure since last successful login
Cause - during login sequence is SSH key, after that passphrase.

Code: Select all

%%%%%%%%%%%  OPCOM   4-MAY-2023 06:15:32.52  %%%%%%%%%%%
Message from user AUDIT$SERVER on X861
Security alarm (SECURITY) and security audit (SECURITY) on X861, system id: 1066
Auditable event:          Network login failure
Event time:                4-MAY-2023 06:15:32.52
PID:                      0000046A        
Process name:             SSHD22_BG27133  
Username:                 SSH$SSH         
Remote node fullname:     SSH_PUBLICKEY:192.168.0.10
Remote username:          SYSTEM
Status:                   %LOGIN-F-NOTVALID, user authorization failure
From my point of view this shouldn't be counted as failure.

Not sure, if this can be somehow configured?

Best regards
Andreas
Last edited by mister.moderator on Mon May 22, 2023 7:22 am, edited 1 time in total.

Tags:


sms
Master
Posts: 288
Joined: Fri Aug 21, 2020 5:18 pm
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by sms » Thu May 04, 2023 8:09 am

Code: Select all

> not sure, if this is category "Bug or Feature".

   I called it a bug when I reported it for OPENSSH V8.9-1A on VMS E9.2: 
SPS-636, 2022-05-31.  So, VSI should be aware of it.

> Not sure, if this can be somehow configured?

   I know of no way (other than disabling the publickey authentication
method, or actually using publickey authentication).


finitud
Newbie
Posts: 4
Joined: Thu Apr 06, 2023 12:03 pm
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by finitud » Thu May 04, 2023 2:32 pm

It's worse than that, since when using public key authentication with several keys, the server reports accepting ed25519 keys but then fails to accept it when presented. The client then falls back to RSA, which is accepted. But every login counts as 1 failed login attempt, so when you're logging in and out you're going to be periodically marked as an intruder and locked out of your system for periods of time.

If you happen to have more than one key in your client, you could have several "failed login attempts" logged every time you log in.

User avatar

imiller
Master
Posts: 122
Joined: Fri Jun 28, 2019 8:45 am
Reputation: 0
Location: South Tyneside, UK
Status: Offline
Contact:

Re: 1 failure since last successful login

Post by imiller » Fri May 05, 2023 6:34 am

report it as an issue via the Service Platform as that may move it up the list of things VSI have to do.
Ian Miller
[ personal opinion only. usual disclaimers apply. Do not taunt happy fun ball ].


gdwnldsksc
Contributor
Posts: 23
Joined: Sat Apr 22, 2023 3:56 am
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by gdwnldsksc » Fri May 05, 2023 11:34 pm

I wouldn't do that, all hobbyist SP issues have been closed saying to report them in the forums instead and they'll get noticed/elevated as needed.

See for example (if logged in as hobbyist/community user) - https://sp.vmssoftware.com/#/org/issues/sps-996

"thanks for the report. I know that DECwindows was tested in earlier versions of 9.*. Normally, Community members ares supposed to use the Forum for group resolutions of problems, but this being something that doesn’t work, perhaps I can follow up."

User avatar

mister.moderator
Site Admin
Contributor
Posts: 14
Joined: Thu Apr 27, 2023 11:14 am
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by mister.moderator » Mon May 08, 2023 7:07 am

This issue was already reported once in the Service Portal and is being worked on. For future reference, we have an internal procedure in place for reports on the forum and we will escalate issues according to our procedure when appropriate.
VMS Forum Moderator
VMS Forum Administrator

User avatar

volkerhalle
Master
Posts: 195
Joined: Fri Aug 14, 2020 11:31 am
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by volkerhalle » Mon May 08, 2023 10:05 am

mister.moderator wrote:
Mon May 08, 2023 7:07 am
This issue was already reported once in the Service Portal and is being worked on. For future reference, we have an internal procedure in place for reports on the forum and we will escalate issues according to our procedure when appropriate.
mister.moderator,

would it be possible to add an appropriate note in a topic, once it has been reported internally ? So that we wouldn't need to spend additional effort in reproducing, isolating and describing the problem ?

Thanks,

Volker.

User avatar

mister.moderator
Site Admin
Contributor
Posts: 14
Joined: Thu Apr 27, 2023 11:14 am
Reputation: 0
Status: Offline

Re: 1 failure since last successful login

Post by mister.moderator » Fri May 12, 2023 4:19 am

That is a good idea and we will be bringing a similar functionality to the forum very soon so that VSI Moderators and Admins can add tags to the topics so people can see if issues have already been elevated or not.
Last edited by mister.moderator on Fri May 12, 2023 4:21 am, edited 1 time in total.
VMS Forum Moderator
VMS Forum Administrator

User avatar

martinv
Master
Posts: 101
Joined: Fri Jun 14, 2019 11:05 pm
Reputation: 0
Location: Goslar, Germany
Status: Offline
Contact:

Re: 1 failure since last successful login

Post by martinv » Fri Jan 05, 2024 7:48 am

AFAICT, this does not occur any more after installation of OpenSSH V8.9-1H.
Working hard for something we don't care about is called stress;
working hard for something we love is called passion.
(Simon Sinek)

Post Reply