search for: endgrent

https://bugzilla.mindrot.org/show_bug.cgi?id=2087 Bug ID: 2087 Summary: endgrent() is not available on Android Classification: Unclassified Product: Portable OpenSSH Version: 6.2p1 Hardware: All OS: Linux Status: NEW Severity: minor Priority: P5 Component: ssh Assignee: unassi...

...ing)) { + + DEBUG(10,("validate_group: = gr_mem = %s\n", gptr->gr_mem[i])); + + safe_strcpy(member, gptr->gr_mem[i], sizeof(pstring) - copied_len - 1); + copied_len += member_len; + member += copied_len; + } else { + *member = '\0'; + } + } + + endgrent(); + + member = member_list; + while (*member) { static fstring name; - fstrcpy(name,*member); + fstrcpy(name,member); if (user_ok(name,snum) && password_ok(name,password,pwlen,NULL)) { endgrent(); return(&name[0]); } - member++; + + D...

...It enables ssh to authenticate, set groups and attach network credentials. It's a clean implementation (i left out the credential-move-hack). This one adds the --with-dce option to configure Some notes have rised: The for loop 3->64 closing fd's... is it really needed? Is it solaris endgrent() that leave fd's? I get a hang on closing fd 12 and 16. I'm using sec_des_generate_random_block() to create entropy, so if you have DCE, you don't need EGD. Thoughts on that? Regards, Tor-?ke ______________________________________________________ Get Your Private, Free Email at htt...

...sd-server with postfix and sasl > pam to authentificate users via smtp_auth over a windows-pdc from the syslog, i get the message: User "Michael" granted access, also all wbinfo-command work, my e-mail-programm says: 435 error: authentification failed my debug.log tells me: group, endgrent, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyaddr, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyname, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winb...

...sd-server with postfix and sasl > pam to authentificate users via smtp_auth over a windows-pdc from the syslog, i get the message: User "Michael" granted access, also all wbinfo-command work, my e-mail-programm says: 435 error: authentification failed my debug.log tells me: group, endgrent, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyaddr, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyname, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winb...

...ommand, which is very similar: /* Become the user and group(s) specified by PW. */ static void change_identity (const struct passwd *pw) { #ifdef HAVE_INITGROUPS errno = 0; if (initgroups (pw->pw_name, pw->pw_gid) == -1) error (EXIT_FAIL, errno, _("cannot set groups")); endgrent (); #endif if (setgid (pw->pw_gid)) error (EXIT_FAIL, errno, _("cannot set group id")); if (setuid (pw->pw_uid)) error (EXIT_FAIL, errno, _("cannot set user id")); } This patch seems to solve the problem for me - Can someone please review this for possible inc...

...interact with it. The commands are noted in (parenthesis). (winbindd -i -d 9) 00a0 status: NT_STATUS_OK ("getent group" command issued) accepted socket 17 [17171]: request interface version [17171]: request location of privileged pipe accepted socket 18 [17171]: setgrent [17171]: endgrent ("getent passwd" command issued) accepted socket 17 [17172]: request interface version [17172]: request location of privileged pipe accepted socket 18 [17172]: setpwent [17172]: endpwent (winbindd -i -d 9) 00a0 status: NT_STATUS_OK ("wbinfo -g" command issued) accepted...

...H_IRIX_JOBS + jid_t jid = 0; +#else +#ifdef WITH_IRIX_ARRAY + int jid = 0; +#endif /* WITH_IRIX_ARRAY */ +#endif /* WITH_IRIX_JOBS */ + /* login(1) is only called if we execute the login shell */ if (options.use_login && command != NULL) @@ -1086,11 +1097,21 @@ exit(1); } endgrent(); +# ifdef WITH_IRIX_JOBS + jid = jlimit_startjob(pw->pw_name, pw->pw_uid, "interactive"); + if (jid == -1) { + fatal("Failed to create job container: %.100s", + strerror(errno)); + } +# endif /* WITH_IRIX_JOBS */ + # ifdef WITH_...

...e pam_krb5 module should really check this, but it does not, and a simple workaround is to move the setcred call to after the UID setting. *** session.c-ORG Mon Feb 25 16:48:03 2002 --- session.c Mon Apr 22 03:48:01 2002 *************** *** 1135,1140 **** --- 1135,1145 ---- exit(1); } endgrent(); + # if defined(WITH_IRIX_PROJECT) || defined(WITH_IRIX_JOBS) || defined(WITH_IRIX_ARRAY) + irix_setusercontext(pw); + # endif /* defined(WITH_IRIX_PROJECT) || defined(WITH_IRIX_JOBS) || defined(WITH_IRIX_ARRAY) */ + /* Permanently switch to the desired uid. */ + permanently_set_uid(pw);...

...et_users_in_group_by_gid(gid_t gid) { struct sys_userlist *list_head = NULL; struct group *gptr; setgrent(); while((gptr = getgrent()) != NULL) { if (gid == gptr->gr_gid) { list_head = add_members_to_userlist(list_head, gptr); if (list_head == NULL) return NULL; } } endgrent(); return list_head; } It all comes down to the fact that matches are not done against an instantiated user context with all groups mapped to GIDs. Is there any way other than using netgroups to make these matches work efficiently? Has anyone tried adding some caching logic? Hugh Strong CSC Pr...

...appreciate it. I know it has something to do nsswitch because I get these errors in /var/log/debug.log smbd: NSSWITCH(nss_method_lookup): winbind, group, setgrent, not found smbd: NSSWITCH(nss_method_lookup): winbind, group, getgrent_r, not found smbd: NSSWITCH(nss_method_lookup): winbind, group, endgrent, not found ls: NSSWITCH(nss_method_lookup): winbind, passwd, setpwent, not found ls: NSSWITCH(nss_method_lookup): winbind, group, setgrent, not found ls: NSSWITCH(nss_method_lookup): winbind, passwd, getpwuid_r, not found ls: NSSWITCH(nss_method_lookup): winbind, group, getgrgid_r, not found ls: NS...

Hi all, In the Oreilly "Using Samba" book pg 292 it is recommended to turn off Winbindd(8) user and group enumeration (very expensive operation). However, when doing this on FreeBSD -CURRENT the groups that users are in are not recognised. When I enable user and group enumeration group permissions work (at least for the first 16 groups) i.e. via chown(1). So my question is: From

...group.gr_mem = 0x25af8 (user1a) 0x25b00 (domadmin) [ 932]: nss_winbind: _nss_winbind_getgrent_solwrap: Returning group: TBMCS ... [ 932]: getgrent [ 932]: nss_winbind: _nss_winbind_getgrent_solwrap: Returning error: 1. [ 932]: nss_winbind: _nss_winbind_endgrent_solwrap [ 932]: endgrent [ 932]: nss_winbind: _nss_winbind_group_destr uid=1001(user2a) gid=10(localgrp) groups=1(other)[ 932]: nss_winbind: Initialized nss_winbind group backend [ 932]: nss_winbind: _nss_winbind_getgrgid_solwrap [ 932]: getgrgid 10000 ,2(bin),4(adm),14(sysadmin),10000(Domain...

...at st; char *argv[10]; + #ifdef WITH_IRIX_PROJECT + prid_t projid; + #endif /* WITH_IRIX_PROJECT */ /* login(1) is only called if we execute the login shell */ if (options.use_login && command != NULL) *************** *** 846,851 **** --- 853,877 ---- exit(1); } endgrent(); + + #ifdef WITH_ARRAY + /* initialize array session */ + if (newarraysess() != 0) + fatal("Failed to set up new array session: %.100s", + strerror(errno)); + #endif /* WITH_ARRAY */ + + #ifdef WITH_IRIX_PROJECT + /* initialize irix project info */ + if ((pro...

...9;t have a native crypt() function; bz#2112 * Test for fd_mask, howmany and NFDBITS rather than trying to enumerate the plaforms that don't have them. bz#2085 * Replace S_IWRITE, which isn't standardized, with S_IWUSR, which is. bz#2085 * Add a null implementation of endgrent for platforms that don't have it (eg Android) bz#2087 * Support platforms, such as Android, that lack struct passwd.pw_gecos. bz#2086 Reporting Bugs: =============== - Please read http://www.openssh.com/report.html Security bugs should be reported directly to openssh at openssh...

...ads/openssh-6.6p1/sshpty.c:211: warning: Using 'getgrnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking session.o: In function `do_setusercontext': /home/john/Downloads/openssh-6.6p1/session.c:1539: warning: Using 'endgrent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking ./libssh.a(misc.o): In function `secure_permissions': /home/john/Downloads/openssh-6.6p1/misc.c:686: warning: Using 'getpwent' in statically linked applications requir...

...9;t have a native crypt() function; bz#2112 * Test for fd_mask, howmany and NFDBITS rather than trying to enumerate the plaforms that don't have them. bz#2085 * Replace S_IWRITE, which isn't standardized, with S_IWUSR, which is. bz#2085 * Add a null implementation of endgrent for platforms that don't have it (eg Android) bz#2087 * Support platforms, such as Android, that lack struct passwd.pw_gecos. bz#2086 Checksums: ========== - SHA1 (openssh-6.3.tar.gz) = 8a6ef99ffc80c19e9afe9fe1e857370f6adcf450 - SHA1 (openssh-6.3p1.tar.gz) = 70845ca79474258cab2...

...9;t have a native crypt() function; bz#2112 * Test for fd_mask, howmany and NFDBITS rather than trying to enumerate the plaforms that don't have them. bz#2085 * Replace S_IWRITE, which isn't standardized, with S_IWUSR, which is. bz#2085 * Add a null implementation of endgrent for platforms that don't have it (eg Android) bz#2087 * Support platforms, such as Android, that lack struct passwd.pw_gecos. bz#2086 Checksums: ========== - SHA1 (openssh-6.3.tar.gz) = 8a6ef99ffc80c19e9afe9fe1e857370f6adcf450 - SHA1 (openssh-6.3p1.tar.gz) = 70845ca79474258cab2...

Hi, I have several Debian servers with puppet 0.23.2. Part of my manifest looks like this: class virt_all_users { @group { "andy": ensure => "present", gid => "1000" } @user { "andy": ensure => "present", uid => "1000",

...LD/openssh-5.6p1/sshpty.c:211: warning: Using 'getgrnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking session.o: In function `do_setusercontext': /builddir/build/BUILD/openssh-5.6p1/session.c:1513: warning: Using 'endgrent' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking sshd.o: In function `main': /builddir/build/BUILD/openssh-5.6p1/sshd.c:1545: warning: Using 'getpwnam' in statically linked applications requires at runtime the shared...