search for: client_process_control

http://bugzilla.mindrot.org/show_bug.cgi?id=1263 Summary: connection sharing often freezes Product: Portable OpenSSH Version: v4.5p1 Platform: PPC OS/Version: Mac OS X Status: NEW Severity: major Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: vincent at

...pos that is similiar to a dirty patch that I came up with; so I've been implementing the patch in the repos. The patch includes clientloop.c at 1.182, monitor_fdpass.h at 1.4 and monitor_fdpass.c at 1.13. The problem I've hit is that in the cleanup-code for a failed mm_receive_fd() in the client_process_control() function, the client_fd filehandle is left open and lost. The effect is that the slave ssh process blocks and never returns even if filehandles are freed due to other slave processes closing. I've attached a patch that I think fixes this problem. I've also created a simple regression, bu...

Hi all, currently I am considering writing a patch for OpenSSH that will allow portforwarding using the control_master unix domain socket. The idea is to introduce an extra SSHMUX command, SSHMUX_COMMAND_SOCKS, which will then pass control to the normal socks functions used for dynamic forwarding. The main reason for me to write this patch are: - some more control over who gets to connect to

...com> --- clientloop.c | 2 ++ 1 files changed, 2 insertions(+) diff -uprN openssh-4.3p2/clientloop.c openssh-4.3p2-kylie/clientloop.c --- openssh-4.3p2/clientloop.c 2005-12-30 23:22:32.000000000 -0600 +++ openssh-4.3p2-kylie/clientloop.c 2006-05-04 10:36:49.000000000 -0500 @@ -833,6 +833,8 @@ client_process_control(fd_set * readset) debug2("%s: accepted tty %d, subsys %d, cmd %s", __func__, cctx->want_tty, cctx->want_subsys, cmd); + xfree(cmd); + /* Gather fds from client */ new_fd[0] = mm_receive_fd(client_fd); new_fd[1] = mm_receive_fd(client_fd);

Attached (and inline) is a patch to add the following config options: ControlBindMask ControlAllowUsers ControlAllowGroups ControlDenyUsers ControlDenyGroups It pulls the peer credential check from client_process_control() in ssh.c, and expounds upon it in a new function, client_control_grant(). Supplemental groups are not checked in this patch. I didn't feel comfortable taking a shot at defining the semantics of how supplemental groups would work. groupaccess.c probably has all the code necessary to employ su...

Three patches attached. One implements a 'ControlPersist' option, which when used with 'ControlMaster auto' or 'ControlMaster 'yes' make makes the master background itself and stick around after its own primary session is completed. The second causes control clients to pass X11 display, auth proto and auth data over the control socket so that appropriate X11