search for: do_authenticated

...ess() call). There is a similar call in auth1.c, down in do_authentication(), which is still there in 2.9.9p2. So with 2.9.9p2, the lastlog stuff is handled properly if you connect with protocol version 1, but not with protocol version 2. Looking at the code a little, maybe this can be moved into do_authenticated() in session.c covering both the protocol versions. There's already other WITH_AIXAUTHENTICATE code in there, too. Not being familiar with the "proper" place for various steps, I don't know if this is the correct place, though. If that would be considered the right place for it...

...uccessful */ - - do_authloop(authctxt); + do_authloop(authctxt, realname); /* The user has been authenticated and accepted. */ packet_start(SSH_SMSG_SUCCESS); @@ -419,5 +425,5 @@ packet_write_wait(); /* Perform session preparation. */ - - do_authenticated(authctxt); + do_authenticated(authctxt, realname); } diff -ru openssh-3.1p1/auth2.c openssh-3.1p1-mods/auth2.c - --- openssh-3.1p1/auth2.c Thu May 9 12:18:26 2002 +++ openssh-3.1p1-mods/auth2.c Thu May 9 12:19:55 2002 @@ -75,7 +75,7 @@ /* helper */ static Authmethod *authmethod_...

...elect () from /usr/lib/libc.so.1 #2 0x000339a0 in wait_until_can_do_something (readsetp=0xffbee5dc, writesetp=0xffbee5d8, maxfdp=0xffbee5d4, nallocp=0xffbee5d0, max_time_milliseconds=0) at serverloop.c:325 #3 0x00034d6c in server_loop2 (authctxt=0x123ac8) at serverloop.c:776 #4 0x0003ae0c in do_authenticated (authctxt=0x123ac8) at session.c:2265 #5 0x0002ea78 in main (ac=1161216, av=0x11f288) at sshd.c:1719 ssh: (gdb) backtrace #0 0xff19d618 in _poll () #1 0xff14d53c in _select () #2 0x3156c in ?? () #3 0x2d048 in ?? ()

I would like to put a patch in OpenSSH start lbxproxy on the server if both ends of the connection support LBX. I'm having difficulty figuring out where to put this code, specifically I can't seem to find where the X11 handshaking happens. Could someone help me out on this?? -Carl

...d064 select (efffd170, ef6266cc, 11e8d0, ef6266d0, 11e8d4, 11) + 280 00034560 wait_until_can_do_something (effff24c, effff248, effff244, 64, 4, 1) + 2b8 00034d74 server_loop (fb000, 0, 104000, fb000, 104000, effff240) + 20c 00036c7c do_exec_pty (10bbcc, 11, 36634, fb400, 8a, 0) + 260 00036704 do_authenticated1 (0, 36400, fac00, 106800, ef623700, 36014) + 60c 00036074 do_authenticated (110fa8, efffefbc, d0710, 400, efffefc8, 0) + 80 0002d720 do_authentication (effff418, 3, fac00, cfc00, fb000, 10e400) + 174 0002c17c main (1eb4, f, 1, fac00, 1eb4, 10c498) + 1418 0002a27c _start (0, 0, 0, 0, 0, 0...

Hi, I installed 3.0.2p1 on our Solaris 8 systems this week (new to ssh), and when I look at the process list for sshd, I see: root 14547 1 0 10:35:29 ? 0:00 /opt/openssh/sbin/sshd root 14548 14547 0 10:35:36 ? 0:01 /opt/openssh/sbin/sshd Process 14547 is the deamon listening on port 22, but process 14548 is my connection from elsewhere. I consider it a design

...related to interactivity). The problem: Function set_packet_set_interactive is never called for protocol 2 connections -- only for protocol 1. This is the case for both ssh and sshd. Specifically, for sshd protocol 1 connections, function calls are made: main to do_authentication to do_authenticated to packet_set_interactive For sshd protocol 2 connections, function calls are made: main to do_authentication2 to do_authenticated2 which does not call packet_set_interactive. For ssh protocol 1 connections, packet_set_interactive is called from ssh_session. For protocol 2,...

..., tvp); (gdb) p connection_closed $1 = 0 (gdb) bt #0 wait_until_can_do_something (readsetp=0x7ffff8e4, writesetp=0x7ffff8e0, maxfdp=0x7ffff8dc, nallocp=0x7ffff8d8, max_time_milliseconds=0) at serverloop.c:326 #1 0x8bfc in server_loop2 (authctxt=0x42f91c) at serverloop.c:771 #2 0x1030f in do_authenticated2 (authctxt=0x42f91c) at session.c:2086 #3 0xcc19 in do_authenticated (authctxt=0x42f91c) at session.c:216 #4 0x2eaa in main (ac=6, av=0x7ffffe28) at sshd.c:1506 (gdb) s at this point the connection this hangs. I do not know how to process from here, please advise Vikash

.../ ", pw=0xbfbfef80, display=0x806c0a0 "mocha.cs.iastate.edu:10.0", auth_proto=0x806c100 "MIT-MAGIC-COOKIE-1", auth_data=0x8075000 "cdf4b6cb730310be3d51a8abf77303fc") at /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/sshd.c:2211 #4 0x805386c in do_authenticated (pw=0xbfbfef80) at /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/sshd.c:2037 #5 0x80527b4 in do_authentication () at /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/sshd.c:1408 #6 0x8051b43 in main (ac=1, av=0xbfbff624) at /usr/src/secure/usr.sbin/sshd/../../../crypto/op...

Here are some patches to re-enable support for AIX's authenticate routines. With them, ssh will honor locked & unlocked accounts, record successful and unsuccessful logins, and deny accounts that are prohibited to log in via the network. Tested with AIX 4.3. It also includes a fix for handling SIGCHLD that may be needed for other platforms (HP-UX 10.20, for example). If I get the time

...l_request (type=98, plen=19, ctxt=0x116898) at channels.c:1974 #9 0x3cae0 in dispatch_run (mode=1, done=0x0, ctxt=0x116898) at dispatch.c:71 #10 0x30e1c in process_buffered_input_packets () at serverloop.c:423 #11 0x314b8 in server_loop2 (authctxt=0xffbef408) at serverloop.c:705 #12 0x348d8 in do_authenticated2 (authctxt=0x1170f0) at session.c:2063 #13 0x31eb4 in do_authenticated (authctxt=0x1170f0) at session.c:199 #14 0x29c68 in do_authentication2 () at auth2.c:134 #15 0x280d4 in main (ac=6, av=0x8) at sshd.c:1204 I do not claim to know what the correct fix is, however I can avoid the segfault by rem...

Hello, in the BSD Authentication system the login script can request environment variables to be set/unset. The call to auth_close() in auth-passwd.c does change the current environment, but those changes are lost for the child environment. It would be really useful to add some kind of mechanism to get those changes into the child environment. I've added two possible solutions. Both

...n.c seems to clear it up, but now I'm asking for help in better understanding the problem and determining if there any unexpected side effects of the change. First, the code change: $ diff orig_session.c session.c 216c216,218 < alarm(0); --- > verbose("Clearing alarm in do_authenticated"); > /*alarm(0);*/ > signal(SIGALRM, SIG_IGN); So, I replaced "alarm(0);" in do_authenticated with a call to verbose and a "signal(SIGALRM, SIG_IGN);" Now, the problem description. We are running OpenSSH 4.2p1 on Solaris 8 (Sparc) that has a recent reco...

Hi! as I just noted, after scp the connection does not shut down properly. When I do a "scp file targethost:path", on targethost a "sshd" process is left running. I do use --with-default-path="/usr/local/openssh/bin:/usr/bin:/usr/local/bin" to assure, that the corrensponding openssh-scp is used. It also seems, that normal sessions are not always closed properly.

...gss_krb5_named_keys.10/session.h --- 2_9_p2_w_gss_krb5_named_keys.10/session.h Tue, 26 Jun 2001 16:27:13 -0400 willian (OpenSSH/i/13_session.h 1.2 644) +++ 2_9_p2_w_gss_krb5_named_keys.10(w)/session.h Thu, 25 Oct 2001 14:58:32 -0400 willian (OpenSSH/i/13_session.h 1.2 644) @@ -28,6 +28,7 @@ void do_authenticated(Authctxt *ac); +int session_still_used(); int session_open(int id); void session_input_channel_req(int id, void *arg); void session_close_by_pid(pid_t pid, int status); Index: 2_9_p2_w_gss_krb5_named_keys.10/session.c --- 2_9_p2_w_gss_krb5_named_keys.10/session.c Tue, 26 Jun 2001 16:27:13 -040...

I set sshd to deny root login. But I still get a password prompt! So if I get the password right, I get one error message: Received disconnect: ROOT LOGIN REFUSED FROM example.com while if I simply put in a wrong password three times I get Permission denied. If this means I set it up wrong please mail me directly - I'm not subscribed to the list. Otherwise please fix this. -- The

Howdy coders, in openssh-2.5.2p2, auth1.c, do_authentication() you folks do a call to getpwnam(user) If this fails, you NULL out 'pw' Unfortunately, this stops start_pam() from being called at all. I'm not a PAM API expert, but I was under the impression that there are pam API calls you should be making for account verification, in PARALLEL to getpwnam(), rather than being

http://bugzilla.mindrot.org/show_bug.cgi?id=191 Summary: compilation faills in auth1.c:392 `pw' undeclared when USE_PAM is on Product: Portable OpenSSH Version: -current Platform: ix86 OS/Version: Linux Status: NEW Severity: critical Priority: P2 Component: Miscellaneous

...session.c:1780 #9 0x00028790 in server_input_channel_req (type=1111888, seq=13, ctxt=0x10d018) at ../serverloop.c:1021 #10 0x00038930 in dispatch_run (mode=1, done=0x0, ctxt=0x10d018) at ../dispatch.c:93 #11 0x00027f5c in server_loop2 (authctxt=0xff800) at ../serverloop.c:764 #12 0x00028d18 in do_authenticated (authctxt=0x109230) at ../session.c:218 #13 0x0001d84c in main (ac=7868, av=0x6) at ../sshd.c:1536 (gdb) frame 1 #1 0x0003ccb4 in fatal_cleanup () at ../log.c:254 254 (*cu->proc) (cu->context); (gdb) print cu $1 = (struct fatal_cleanup *) 0x1097e0 (gdb) print *cu $2 = {n...

...p)+1, *readsetp, *writesetp, NULL, tvp); (gdb) bt #0 wait_until_can_do_something (readsetp=0x7ffff8e4, writesetp=0x7ffff8e0, maxfdp=0x7ffff8dc, nallocp=0x7ffff8d8, max_time_milliseconds=0) at serverloop.c:326 #1 0x8bfc in server_loop2 (authctxt=0x42f91c) at serverloop.c:771 #2 0x1030f in do_authenticated2 (authctxt=0x42f91c) at session.c:2086 #3 0xcc19 in do_authenticated (authctxt=0x42f91c) at session.c:216 #4 0x2eaa in main (ac=6, av=0x7ffffe28) at sshd.c:1506 (gdb) s