Return
-
Title
Why is the PAN OS platform sending an incorrect stream when performing a "Check Password" while using a password and not a public key? -
Description
The PAN OS platform is not sending the correct ssh stream when performing a "Check Password" procedure while using a password and not a DSS key.
ssh -2 -v -l funcacct -i /home/edmzpar/keys/id_dsa -i /home/edmzpar/keys/pan_funcacct -i /home/edmzpar/keys/pan_tstacct -p 22 -o BatchMode=yes -o PasswordAuthentication=no -o ConnectionTimeout=600 192.168.2.1
-
Cause
The problem occurs when the functional account uses a DSS key. The PAN OS platform sends the wrong ssh command.
-
Resolution
WORKAROUND
Configure the functional account to connect to the managed system with a password.
STATUS
One Identity has identified the defect in the PAN OS platform and has included a solution in TPAM 2.5.921. -
Change Request
10240