[Bug 977313] [NEW] Too many logins - sessions not cleared

[Launchpad Bug Tracker]

*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

Ubuntu 11.10 server example:

When I configure user ice to allow only 3 logins logged out SSH sessions
are not being cleared.

/etc/security/limits.conf

ice              hard    maxlogins       3

The user ice can login and logout many times without problem but if they
login 3 times and hit the maxlogins limit then logout of all sessions
the user can't log back in again even though there are zero logged in
sessions.

/var/log/auth.log

pam_unix(sshd:session): session opened for user ice by (uid=0)
pam_limits(sshd:session): Too many logins (max 3) for ice

PAM reports too many logins even though the user ice has no current
logins.

** Affects: pam (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: bot-comment
-- 
Too many logins - sessions not cleared
https://bugs.launchpad.net/bugs/977313
You received this bug notification because you are a member of Ubuntu Foundations Bugs, which is subscribed to pam in Ubuntu.