search for: astrog

...un's pam-module. It should realize the problem and verify ownership of the credential-file, but.. Simply changing UID works, so why not, even if giving Sun a hard time about it would be fun. Anyway... If this change seems appropriate, I am appending my diff. -- Gunnar -- Gunnar Brading, Astrogator AB - High Performance Networks & Interactive Media Email; gunnar at astrogator.se Address; R?rstrandsgatan 30A, 113 40 STOCKHOLM Office: +46 8 5456 0010 Fax: +46 8 5456 0011 Cellular: +46 70 778 2 877 The scientist describes what is; the engineer creates what never was...

...Product: Portable OpenSSH Version: 3.1p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: gunnar at Astrogator.SE pam_setcred() is called before the UID is set to the users own, and pam_krb5 on Solaris sets the owner of of the /tmp/krb5cc_xxx file to root. The pam_krb5 module should really check this, but it does not, and a simple workaround is to move the setcred call to after the UID setting. *** s...

http://bugzilla.mindrot.org/show_bug.cgi?id=127 ------- Additional Comments From djm at mindrot.org 2003-01-07 17:13 ------- This fix is incorrect - the creds (which are often supplemental groups) need to be restablished after initgroups(), which we call elsewhere. Does the PAM module not support restablishing credentials? ------- You are receiving this mail because: ------- You are the