openssh bugs - Mar 2004 - [Bug 820] utmp seems to be getting clobbered on logins

http://bugzilla.mindrot.org/show_bug.cgi?id=820

           Summary: utmp seems to be getting clobbered on logins
           Product: Portable OpenSSH
           Version: 3.8p1
          Platform: All
        OS/Version: IRIX
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: ktaylor at daac.gsfc.nasa.gov


[-hostname-]/usr/people/ktaylor>last -3
ktaylor  ttyq2        host.someplace.org    Mon Mar 29 12:04   still logged in

The is the information I expect to see.

Then, I open a second window:

[-hostname-]/usr/people/ktaylor>last -3
ktaylor  ttyq3        host.someplace.org    Mon Mar 29 12:04   still logged in
ktaylor  ttyq3                              Mon Mar 29 12:04 - 12:04  (00:00)
ktaylor  ttyq2                              Mon Mar 29 12:04   still logged in

So, the first connection has had its 'from' information removed, then
another
login happens and logs right out (perhaps this is privilege separation), then
the actual second login session occurs with the proper information.

On logout, that 'from' info is again wiped from utmp.

This is an IRIX box running 6.5.22 and openssh-3.8p1



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From dtucker at zip.com.au  2004-03-30 10:01 -------
Is this related to bug #378?  Does IRIX have updwtmpx, and if so is it detected
by configure (check for HAVE_UPDWTMPX in config.h)?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |821
              nThis|                            |
             Status|NEW                         |ASSIGNED



------- Additional Comments From dtucker at zip.com.au  2004-03-30 11:38 -------
Consider this one for 3.8.1p1 (if we can figure out how to fix it).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From ktaylor at daac.gsfc.nasa.gov  2004-03-30 21:25
-------
We're not using UseLogin because of issues we've had in the past, so I
won't say
it's exactly like the other bug.

I can say that it did work in 3.6.1, but that's a lot of changes from v3.8.

config.h:#define HAVE_UPDWTMPX 1
config.h.in:#undef HAVE_UPDWTMPX
config.log:#define HAVE_UPDWTMPX 1

Looks like updwtmpx was found.

This could be completely unrelated, but something I'll mention. IRIX has
been
having some issues with ipv6 support. It was an issue in irix 6.5.18, but may
have been 'fixed' in irix 6.5.22. It's been known to cause weird
issues with
stuff like ftp sessions generating weird errors, etc. I wouldn't think it is
related to this, but you never know. The only option related to ipv6 I can see
is the 4in6 option, so there's nothing else I can disable.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From dtucker at zip.com.au  2004-03-30 21:36 -------
Try commenting out the "#define HAVE_UPDWTMPX 1" line in config.h and
recompile,
this will disable its use (and thus behave more like previous versions).

Also, if you put "#define BROKEN_GETADDRINFO 1" into config.h and
recompile it
will disable the IPv6 support.  It would be interesting to see if that makes a
difference here if the above doesn't.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From ktaylor at daac.gsfc.nasa.gov  2004-03-30 22:09
-------
Ok. So far so good. The first change you recommended seems to work better. We
now get proper looking records. Unfortunately this one machine is extremely low
usage, so we'll have to wait to see how it handles under higher load. It
also
seemed to fix the issue of that 'extra' login record that I thought may
have
been the privilege separation.

FYI, I had these notes from our build of 3.6.1:

  * Due to VerifyReverseMapping option causing sshd core dumps, these
    changes need to be made also (for IRIX):
    *** NOTE: this was fixed as of 6.5.20+ [not tested yet though] ***

  Edit $SRC/config.h

  change:

    /* #undef BROKEN_GETADDRINFO */
    to
    #define BROKEN_GETADDRINFO
  and 
    #define HAVE_GETADDRINFO 1
    to
    /* #define HAVE_GETADDRINFO 1 */ 

We won't know if sgi actually fixed this issue until we run it on a higher
usage
box than the one we have this running on right now. 

Thanks for your help.

You can close the bug. If it happens again, I'll just open a new bug and
refer
back. Hopefully this fix will still work on a higher usage system. I don't
see
why it wouldn't.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From dtucker at zip.com.au  2004-03-30 22:24 -------
OK, so it looks like updwtmpx doesn't work right on IRIX for some reason. 
Any
suggestions for what to do with it?  (Maybe add a BROKEN_UPDWTMPX and enable it
for IRIX?)

BTW, if anyone else is looking for it the IRIX VerifyReverseMapping stuff is bug
#585 (also from Kevin).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820





------- Additional Comments From dtucker at zip.com.au  2004-04-04 22:29 -------
Created an attachment (id=593)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=593&action=view)
Don't use updwtmpx on IRIX

Please try this patch (apply to a recent snapshot).  You'll need to to run
"autoconf" after applying the patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
    Attachment #593|                            |ok
             Status|                            |



------- Additional Comments From djm at mindrot.org  2004-04-06 20:07 -------
(From update of attachment 593)
looks ok to me




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820

dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED



------- Additional Comments From dtucker at zip.com.au  2004-04-06 21:34 -------
Patch applied, thanks for the report.  The fix will be in tomorrow's
snapshot.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=820

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED



------- Additional Comments From djm at mindrot.org  2004-04-19 23:32 -------
Closed with release of portable OpenSSH 3.8.1p1



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.