search for: openssh_cv

I redid my previous OPIE patch for the current ssh tree. It seems to work fine here, and I'ld love to see it merged before the 3.0 release. Wichert. diff -x CVS -wNur ../cvs/other/openssh_cvs/Makefile.in openssh_cvs/Makefile.in --- ../cvs/other/openssh_cvs/Makefile.in Mon Oct 22 02:53:59 2001 +++ openssh_cvs/Makefile.in Sun Nov 4 01:18:19 2001 @@ -50,7 +50,7 @@ SSHOBJS= ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -SSHDOBJS= sshd.o auth.o auth1....

This is from the current CVS: % make ... In file included from config.h:629, from /home/mo/project/openssh_cvs/includes.h:20, from /home/mo/project/openssh_cvs/scp.c:77: /home/mo/project/openssh_cvs/defines.h:208: warning: redefinition of `clock_t' /usr/include/time.h:60: warning: `clock_t' previously declared here gcc -o scp scp.o -L. -L/usr/local/ssl/lib -L/usr/local/ssl -lssh...

...laring the variables at all in these main() funcs, or by surrounding the declarations with #ifndef HAVE_GETOPT_H extern char *optarg; ... #endif The patch is attached. Thanks, Corinna Index: scp.c =================================================================== RCS file: /cvs/openssh_cvs/scp.c,v retrieving revision 1.118 diff -p -u -r1.118 scp.c --- scp.c 21 Aug 2003 23:34:41 -0000 1.118 +++ scp.c 10 Sep 2003 18:59:00 -0000 @@ -219,8 +219,10 @@ main(int argc, char **argv) int ch, fflag, tflag, status; double speed; char *targ, *endp; +#ifndef HAVE_GETOPT_H extern char *opt...

..., sizeof(entropy_cmd_t)); memset(entcmd, '\0', num_cmds * sizeof(entropy_cmd_t)); Unless sizeof(entropy_cmd_t) is *really* big, it ought to safe :-) Index: auth-pam.c =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/auth-pam.c,v retrieving revision 1.132 diff -u -p -r1.132 auth-pam.c --- auth-pam.c 26 Mar 2006 03:22:48 -0000 1.132 +++ auth-pam.c 4 May 2006 01:51:57 -0000 @@ -288,7 +288,7 @@ import_environments(Buffer *b) /* Import environment from subprocess */ num_env = buffer_get_int(b); - sshpam_env...

The story of this problem, AFAIK, is that Solaris 8 YASSP and JASS and vigilant/paranoid sysadmins have been known to set a restricitve umask in /etc/default/login. OpenSSH compatibility for Solaris 8 has been spotty at times for sparcv9 targets. This time, when a sparcv9 binary tries to sscanf(3C) the numeric umask as a long octal and put it in a mode_t, SIGBUS happens. What this looks like in

...the HAVE_SETGROUPS test in bsd-misc.c. So, since setgroups() exists and is functional in Cygwin, this is actually a noop in the more general sense. The below patch drops that entirely. Corinna Index: acconfig.h =================================================================== RCS file: /cvs/openssh_cvs/acconfig.h,v retrieving revision 1.180 diff -p -u -r1.180 acconfig.h --- acconfig.h 16 Aug 2004 13:12:06 -0000 1.180 +++ acconfig.h 24 Feb 2005 12:59:52 -0000 @@ -52,9 +52,6 @@ #undef SPT_TYPE #undef SPT_PADCHAR -/* setgroups() NOOP allowed */ -#undef SETGROUPS_NOOP - /* SCO workaround */ #u...

Is anyone maintaining the OSF_SIA support in openssh? This seems to be an obvious bug triggered if you try to connect as a non-existant user. >From auth1.c line 459 #elif defined(HAVE_OSF_SIA) (sia_validate_user(NULL, saved_argc, saved_argv, get_canonical_hostname(), pw->pw_name, NULL, 0, NULL, "") == SIASUCCESS)) { #else /*

I experienced a problem compiling openssh_cvs with IRIX 6.5.11f. % cc -version MIPSpro Compilers: Version 7.3.1.2m % cc -n32 -mips3 -O2 -OPT:Olimit=0 ..... -c auth.c cc-1515 cc: ERROR File = auth.c, Line = 100 A value of type "int" cannot be assigned to an entity of type "char *". while ((cp = getusershell()) != NULL...

...herwise serverside port forwarding for reserverd ports doesn't work in Cygwin's 3.4 version. The official Cygwin release of 3.4 contains that additional HAVE_CYGWIN patch so far. Corinna Index: acconfig.h =================================================================== RCS file: /cvs/openssh_cvs/acconfig.h,v retrieving revision 1.141 diff -u -p -r1.141 acconfig.h --- acconfig.h 25 Jun 2002 22:35:16 -0000 1.141 +++ acconfig.h 4 Jul 2002 09:13:29 -0000 @@ -310,6 +310,9 @@ /* Define if X11 doesn't support AF_UNIX sockets on that system */ #undef NO_X11_UNIX_SOCKETS +/* Define if the...

...onfigure is checking for login() in -lutil, finds it, then checks for it again in -lbsd? Here's the relevant excerpts (Red Hat Linux 6.2, , kernel-2.2.19, glibc-2.1.3, egcs-1.1.2, autoconf-2.52): $ CFLAGS='-O2 -mpentium -Wall'; export CFLAGS $ ./configure --prefix=/usr/local/encap/openssh_cvs-2001.10.30.2345UTC ... checking for yp_match... no checking for yp_match in -lnsl... yes checking for setsockopt... yes checking for getspnam... yes checking for login... no checking for login in -lutil... yes <--- #define HAVE_LIBUTIL_LOGIN ^^^^^^^^^^^^^^^^^^^^^^^...

...t's setting of textmode on stdin. The patch solves that problem by explicitly setting binmode on stdin. Besides solving the hanging problem, the patch results in a way faster copy process. Corinna Index: scp.c =================================================================== RCS file: /cvs/openssh_cvs/scp.c,v retrieving revision 1.66 diff -u -p -r1.66 scp.c --- scp.c 2001/03/29 00:43:54 1.66 +++ scp.c 2001/04/02 19:47:14 @@ -291,6 +291,9 @@ main(argc, argv) case 't': /* "to" */ iamremote = 1; tflag = 1; +#ifdef HAVE_CYGWIN + setmode (0, O_BINARY); +#endif brea...

...C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement. -------------- next part -------------- Index: Makefile.in =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/Makefile.in,v retrieving revision 1.238 diff -u -r1.238 Makefile.in --- Makefile.in 5 Jun 2003 08:53:43 -0000 1.238 +++ Makefile.in 20 Jun 2003 13:04:41 -0000 @@ -190,6 +190,7 @@ rm -f *.o *.a $(TARGETS) logintest config.cache config.log rm -f *.out core (cd openbsd-compat && $(MAK...

...you might know, check_ntsec() tests if owner/modes are supported by the OS (9x/ME=no, NT/W2K=yes), the filesystem (FAT/FAT32=no, NTFS=yes) and the current Cygwin settings (ntea/ntsec). Corinna Index: auth-rhosts.c =================================================================== RCS file: /cvs/openssh_cvs/auth-rhosts.c,v retrieving revision 1.17 diff -u -p -r1.17 auth-rhosts.c --- auth-rhosts.c 2001/04/12 23:34:35 1.17 +++ auth-rhosts.c 2001/06/04 10:05:34 @@ -228,6 +228,9 @@ auth_rhosts2(struct passwd *pw, const ch pw->pw_name, pw->pw_dir); return 0; } +#ifdef HAVE_CYGWIN + if (c...

...st contains a conditionalized call to the new function. Hope, that's ok. Additionally I added a patch to contrib/cygwin/README, which just fixes a typo. Thanks in advance, Corinna Index: contrib/cygwin/README =================================================================== RCS file: /cvs/openssh_cvs/contrib/cygwin/README,v retrieving revision 1.6 diff -u -p -r1.6 README --- contrib/cygwin/README 2001/07/18 16:25:42 1.6 +++ contrib/cygwin/README 2001/11/20 12:44:22 @@ -162,7 +162,7 @@ configure are used for the Cygwin binary --prefix=/usr \ --sysconfdir=/etc \ - --libexecdir='${exec_...

Sorry if this is stuff that's been talked about before. If it is, just ignore me. I'm curious to know why Portable OpenSSH doesn't include @bindir@ in the _PATH_STDPATH. This would save most installers of portable OpenSSH from having to --with-default-path=$PREFIX/bin in order to ensure that scp will work properly. This would also, I imagine, save quite a lot of hassle for

...rameter, testing it for NULL inside of the function. Changing the check_nt_auth() to behave that way and changing auth1.c and auth2.c accordingly solves that problem. Patch follows. Thanks, Corinna Index: auth1.c =================================================================== RCS file: /cvs/openssh_cvs/auth1.c,v retrieving revision 1.46 diff -u -p -r1.46 auth1.c --- auth1.c 6 Dec 2001 17:55:26 -0000 1.46 +++ auth1.c 18 Dec 2001 19:07:12 -0000 @@ -313,9 +313,9 @@ do_authloop(Authctxt *authctxt) #ifdef HAVE_CYGWIN if (authenticated && - !check_nt_auth(type == SSH_CMSG_AUTH_PASSW...

sorry, Darren. Long over due comments. [..] >+/* Record a failed login attempt. */ >+void >+record_failed_login(const char *user, const char *host, const char *ttyname) >+{ >+#ifdef WITH_AIXAUTHENTICATE >+ loginfailed(user, host, ttyname); >+#endif >+#ifdef _UNICOS >+ cray_login_failure((char *)user, IA_UDBERR); >+#endif /* _UNICOS */ >+} I like the

...9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement. -------------- next part -------------- Index: acconfig.h =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/acconfig.h,v retrieving revision 1.157 diff -u -r1.157 acconfig.h --- acconfig.h 11 Jun 2003 12:51:32 -0000 1.157 +++ acconfig.h 1 Jul 2003 12:22:40 -0000 @@ -110,6 +110,9 @@ /* Define if you want to enable AIX4's authenticate function */ #undef WITH_AIXAUTHENTICATE +/* Define if your AIX...

...982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement. -------------- next part -------------- Index: auth-passwd.c =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/auth-passwd.c,v retrieving revision 1.54 diff -u -r1.54 auth-passwd.c --- auth-passwd.c 3 Jun 2003 00:25:48 -0000 1.54 +++ auth-passwd.c 5 Jul 2003 02:17:59 -0000 @@ -42,6 +42,9 @@ #include "log.h" #include "servconf.h" #include "auth.h" +#include "buffer.h&qu...

Could someone add this autogen.sh script to the toplevel of openssh_cvs? Many projects include an autogen.sh script so that folks need not remember what auto commands need to get run and in what order. % cat autogen.sh #!/bin/sh # Run this program (./autogen.sh) after changing any of # the files that are used to automatically generate # other files. #aclocal auto...