search for: deny_severity

...ed in NetBSD over the years. Looks like the original. tcpd.h has /* * @(#) tcpd.h 1.5 96/03/19 16:22:24 * * Author: Wietse Venema, Eindhoven University of Technology, The Netherlands. */ $ nm -g /usr/lib/libwrap.so|egrep _severity U allow_severity U deny_severity The man page says The allow_severity and deny_severity variables determine how accepted and rejected requests may be logged. They must be provided by the caller and may be modified by rules in the access control tables. and indeed see lines 68/89 of server/upsd.c which does...

....o CC conf.o CC netssl.o CC sstate.o CC desc.o CC netget.o CC netmisc.o CC netlist.o CC netuser.o CC netset.o CC netinstcmd.o CCLD sockdebug ld: /usr/lib/libwrap.so: undefined reference to `deny_severity' ld: /usr/lib/libwrap.so: undefined reference to `allow_severity' *** [sockdebug] Error code 1 as I understand it, the tcprappers interface requires those variables to exist. Nut does define them: work/nut-2.8.1/server/upsd.c:int allow_severity = LOG_INFO; work/nut-2.8.1/s...

...rt needs some tweaks. I need to add CPPFLAGS=/usr/sfw/include because tcpd.h is in there. Then also LDFLAGS='-R/usr/sfw/lib -L/usr/sfw/lib' is needed. It would be nice to have --with-tcpwrap-dir or something. After this linking gives an error Undefined first referenced symbol in file deny_severity /usr/sfw/lib//libwrap.so allow_severity /usr/sfw/lib//libwrap.so These are not defined but application itself should define these globally so I've added these to configure and src/util/tcpwrap.c #include <syslog.h> int allow_severity = LOG_INFO; int deny_severity = LOG_WARNING; Tom...

...CC sstate.o > CC desc.o > CC netget.o > CC netmisc.o > CC netlist.o > CC netuser.o > CC netset.o > CC netinstcmd.o > CCLD sockdebug > ld: /usr/lib/libwrap.so: undefined reference to `deny_severity' > ld: /usr/lib/libwrap.so: undefined reference to `allow_severity' > *** [sockdebug] Error code 1 > > as I understand it, the tcprappers interface requires those variables to > exist. Nut does define them: > > work/nut-2.8.1/server/upsd.c:int allow_severi...

...-- openssh-3.0.1p1/channels.c Fri Oct 12 04:35:05 2001 +++ openssh-modified/channels.c Mon Nov 26 15:53:04 2001 @@ -55,6 +55,12 @@ #include "key.h" #include "authfd.h" +#ifdef LIBWRAP +#include <tcpd.h> +#include <syslog.h> +extern int allow_severity; +extern int deny_severity; +#endif /* LIBWRAP */ /* -- channel core */ @@ -1006,6 +1012,25 @@ error("accept: %.100s", strerror(errno)); return; } +#ifdef LIBWRAP + /* XXX LIBWRAP noes not know about IPv6 */ + { + struct request_info req; + + request_init(&req, RQ_DAEMON, "sshdf...

...load program ./ssh-keygen because of the following errors: 0509-130 Symbol resolution failed for /usr/local/lib/libwrap.a(libwrap.so) because: 0509-136 Symbol allow_severity (number 71) is not exported from dependent module ssh-keygen. 0509-136 Symbol deny_severity (number 72) is not exported from dependent module ssh-keygen. 0509-192 Examine .loader section symbols with the 'dump -Tv' command. make: 1254-004 The error code from the last command is 255. Checking on dejanews.com revealed that at least one ot...

...it was almost midnight, Cinderella became a pumpkin, and NUT was released!.. Trick or treat?! -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://alioth-lists.debian.net/pipermail/nut-upsdev/attachments/20231031/f3590340/attachment.htm>

...it was almost midnight, Cinderella became a pumpkin, and NUT was released!.. Trick or treat?! -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://alioth-lists.debian.net/pipermail/nut-upsdev/attachments/20231031/f3590340/attachment.htm>

...CC sstate.o > CC desc.o > CC netget.o > CC netmisc.o > CC netlist.o > CC netuser.o > CC netset.o > CC netinstcmd.o > CCLD sockdebug > ld: /usr/lib/libwrap.so: undefined reference to `deny_severity' > ld: /usr/lib/libwrap.so: undefined reference to `allow_severity' > *** [sockdebug] Error code 1 > > as I understand it, the tcprappers interface requires those variables to > exist. Nut does define them: > > work/nut-2.8.1/server/upsd.c:int allow_severi...

Hello there, I have been trying to make the patch work for libwrap(TCP Wrappers) posted on http://dovecot.org/patches <http://dovecot.org/patches%20Patch%20of%201.1> Patch of 1.1 but could not get it work. Any help will be highly appreciated. After compiling and running it I get error "Error: login_tcp_wrappers can't be used because Dovecot wasn't built with

.../* Copyright (C) 2002 Timo Sirainen */ +#define LIBWRAP + #include "common.h" #include "ioloop.h" #include "lib-signals.h" @@ -18,6 +20,11 @@ #include <unistd.h> #include <syslog.h> +#ifdef LIBWRAP +#include <tcpd.h> +int allow_severity =0, deny_severity = 0; +#endif + bool disable_plaintext_auth, process_per_connection, greeting_capability; bool verbose_proctitle, verbose_ssl, verbose_auth; const char *greeting, *log_format; @@ -69,6 +76,10 @@ unsigned int remote_port, local_port; struct client *client; int fd; +#ifdef LIBWRAP + struct re...

...nsl -lz | -lutil -lpam -lcrypto -lskey -lwrap 1>&5 |/usr/bin/ld: cannot find -lskey |collect2: ld returned 1 exit status |configure: failed program was: |#line 6346 "configure" |#include "confdefs.h" |#include <tcpd.h> | int deny_severity = 0, allow_severity = |0; |int main() { |hosts_access(0); |; return 0; } So not libwrap is missing but instead the skey library. Please change the configure error message to contain the right information. Thanks. Ciao Christian -- Debian Developer...

...client->addr, RQ_USER, client->username, 0); + request_init(&req, RQ_DAEMON, progname, RQ_FILE, client->sock_fd, 0); + fromhost(&req); if (!hosts_access(&req)) { /* tcp-wrappers says access should be denied */ send_err(client, NUT_ERR_ACCESS_DENIED); + upslogx(deny_severity, "tcp_wrappers denied connection from %s", eval_client(&req)); return; } #endif /* HAVE_WRAP */ -- 1.7.3.2

..._WITH(tcp-wrappers, + [ --with-tcp-wrappers Enable tcpwrappers support], + [ + if test "x$withval" != "xno" ; then + saved_LIBS="$LIBS" + LIBS="-lwrap $LIBS" + AC_MSG_CHECKING(for libwrap) + AC_TRY_LINK( + [ +#include <tcpd.h> + int deny_severity = 0, allow_severity = 0; + ], + [hosts_access(0);], + [ + AC_MSG_RESULT(yes) + AC_DEFINE(LIBWRAP) + TCPW_MSG="yes" + ], + [ + AC_MSG_ERROR([*** libwrap missing]) + ] + ) + fi + ] +) + +dnl Checks for library functions. +AC_CHECK_FUNCS(arc4random at...

...@@ -1554,6 +1563,30 @@ fi dnl ** +dnl ** TCP wrappers +dnl ** + +if test "$want_libwrap" = "yes"; then + AC_CHECK_HEADER(tcpd.h, [ + old_LIBS=$LIBS + LIBS="$LIBS -lwrap" + AC_TRY_LINK([ + #include <tcpd.h> + int allow_severity; + int deny_severity; + struct request_info request; + ], [ + request_init(&request, 0); + ], [ + AC_DEFINE(HAVE_LIBWRAP,, Define if you have libwrap) + LIBWRAP_LIBS=-lwrap + AC_SUBST(LIBWRAP_LIBS) + ]) + LIBS=$old_LIBS + ]) +fi + +dnl ** dnl ** userdb and passdb checks dnl *...

...* option processing. We will re-instantiate the rights when we are diff -cr openssh-2.2.0p1.orig/sshd.c openssh-2.2.0p1.qnx/sshd.c *** openssh-2.2.0p1.orig/sshd.c Tue Aug 29 02:05:50 2000 --- openssh-2.2.0p1.qnx/sshd.c Tue Sep 12 12:21:29 2000 *************** *** 49,54 **** --- 49,76 ---- int deny_severity = LOG_WARNING; #endif /* LIBWRAP */ + #if defined(__QNX__) && !defined(__QNXNTO__) + /* Define some things not available under QNX */ + + /* from Linux's <sys/param.h> */ + #ifndef howmany + # define howmany(x, y) (((x)+((y)-1))/(y)) + #endif /* !howmany */ + /* from the Li...

...ig Mon Aug 28 20:33:51 2000 +++ ssh.c Mon Oct 2 22:50:29 2000 @@ -30,6 +30,11 @@ RCSID("$OpenBSD: ssh.c,v 1.63 2000/08/28 #include "key.h" #include "authfd.h" #include "authfile.h" +#ifdef LIBWRAP +#include <syslog.h> +int allow_severity = LOG_INFO; +int deny_severity = LOG_WARNING; +#endif /* LIBWRAP */ #ifdef HAVE___PROGNAME extern char *__progname;

I have a few patches for AIX. The patchfile is attached below. The patch has been tested on AIX4.2 and AIX4.3. The patch is on openssh-1.2.1pre25, with openssl-0.94, using RSAref. 1) authenticate support - this function allows the system to determine authentification. Whatever the system allows for login, authenticate will too. It doesn't matter whether it is AFS, DFS, SecureID, local.