openssh bugs - Jun 2010 - [Bug 1774] New: wtmp and lastlog on AIX

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

           Summary: wtmp and lastlog on AIX
           Product: Portable OpenSSH
           Version: 5.5p1
          Platform: All
        OS/Version: AIX
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Build system
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: defrayable at gmail.com


Created attachment 1852
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1852
add conf_wtmp_location and conf_lastlog_location for AIX

Configure doesn't determine the wtmp or the lastlog location on AIX.
Modify configure to explicitly add the paths. add conf_wtmp_location
and conf_lastlog_location for AIX

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Matt Richards <defrayable at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |defrayable at gmail.com

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1852|application/octet-stream    |text/plain
          mime type|                            |
   Attachment #1852|0                           |1
           is patch|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
             Blocks|                            |1803

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2011-01-17
20:35:19 EST ---
Comment on attachment 1852
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1852
add conf_wtmp_location and conf_lastlog_location for AIX

looks reasonable (the change actually has to go into configure.ac) but
I'm curious about why you need it: the login records are written
through loginsuccess().

Are you building without WITH_AIX_AUTHENTICATE?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

--- Comment #2 from Darren Tucker <dtucker at zip.com.au> 2011-01-17
21:58:27 EST ---
Comment on attachment 1852
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1852
add conf_wtmp_location and conf_lastlog_location for AIX
>+         conf_wtmp_location=/var/adm/wtmp
>+         conf_lastlog_location="/etc/security/lastlog"
Actually on further investigation, this looks wrong
(/etc/security/lastlog on AIX is a text format, not the binary format
sshd would write).

Taking this off the list for 5.7p1 until I understand what problem this
is fixing.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|1803                        |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

--- Comment #3 from Matt Richards <defrayable at gmail.com> 2011-01-25
04:14:33 EST ---
I do compile with WITH_AIX_AUTHENTICATE as well as 
-DCUSTOM_FAILED_LOGIN (I was the author of those many years ago). At
one point CUSTOM_FAILED_LOGIN was not needed as it was part of
WITH_AIX_AUTHENTICATE, not sure why it was moved into it's own DEFINE
as it is needed for AIX to log the appropriate entries. I will have to
reinvestigate this one as it has been a long time.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Matt Richards <defrayable at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Matt Richards <defrayable at gmail.com> 2011-01-25
05:22:01 EST ---
After some testing - with/without keys, /var/adm/wtmp,
/etc/security/lastlog, login_success, login_failure, restricted_logins
all seem to work on AIX for openssh 5.7 without any addition patches
needed.

This bug can be closed. Thanks!

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Darren Tucker <dtucker at zip.com.au> 2011-01-25
11:51:21 EST ---
Thanks.  One thing to be aware of is that binaries compiled on AIX4
won't log wtmp entries correctly on AIX5 systems, could this have been
what you saw?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1774

--- Comment #6 from Matt Richards <defrayable at gmail.com> 2011-01-26
03:13:42 EST ---
I compile openssh for each OS level, so wtmp should have not been an
issue.

 I have been doing this patch and defining CUSTOM_FAILED_LOGIN for
years, so whatever the reason was initially does not seem to be the
case now as it works just as well without the patch. Perhaps I was
shooting myself in the foot by defining CUSTOM_FAILED_LOGIN.

Thanks for looking into this.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.