Displaying 20 results from an estimated 168 matches for "getgrouplist".
2004 Feb 20
24
[Bug 787] Minor security problem due to use of deprecated NGROUPS_MAX in uidswap.c (sshd)
http://bugzilla.mindrot.org/show_bug.cgi?id=787
------- Additional Comments From openssh_bugzilla at hockin.org 2004-02-20 13:01 -------
Created an attachment (id=548)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=548&action=view)
NGROUPS patch
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
2007 May 20
0
[Bug 1298] Use of Allow/DenyGroups leads to slow login
...What |Removed |Added
----------------------------------------------------------------------------
CC| |dtucker at zip.com.au
--- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2007-05-20 16:59:07 ---
sshd uses getgrouplist for this which queries only for the specified
user. If the platform doesn't have getgrouplist then the compat code
does enumerate all groups.
Is your configuration using a native getgrouplist (check config.h for
HAVE_GETGROUPLIST)? If so, why doesn't getgrouplist do the same
optimization...
2001 Jun 07
0
Patch for systems with no setreuid()
...setrlimit function. */
#undef HAVE_SETRLIMIT
--- configure.orig Thu Jun 7 14:12:53 2001
+++ configure Thu Jun 7 14:13:40 2001
@@ -3184,7 +3184,7 @@
fi
-for ac_func in arc4random atexit b64_ntop bcopy bindresvport_sa clock fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getnameinfo getrlimit getrusage getttyent getusershell glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid sigaction sigvec snprintf...
2004 Feb 20
1
NGROUPS_MAX on Linux
...list for user with primary (base) and
@@ -40,20 +40,33 @@
int
ga_init(const char *user, gid_t base)
{
- gid_t groups_bygid[NGROUPS_MAX + 1];
- int i, j;
+ gid_t *groups_bygid;
+ int i;
struct group *gr;
if (ngroups > 0)
ga_free();
- ngroups = sizeof(groups_bygid) / sizeof(gid_t);
+ getgrouplist(user, base, NULL, &ngroups);
+ groups_bygid = xmalloc(ngroups * sizeof(*groups_bygid));
+ groups_byname = xmalloc(ngroups * sizeof(*groups_byname));
+
if (getgrouplist(user, base, groups_bygid, &ngroups) == -1)
logit("getgrouplist: groups list too small");
- for (i = 0, j = 0...
2004 Oct 02
12
[Bug 938] "AllowGroups" option and secondary user's groups limit
http://bugzilla.mindrot.org/show_bug.cgi?id=938
Summary: "AllowGroups" option and secondary user's groups limit
Product: Portable OpenSSH
Version: 3.9p1
Platform: ix86
OS/Version: Linux
Status: NEW
Severity: major
Priority: P2
Component: PAM support
AssignedTo: openssh-bugs at
2005 Sep 07
1
[Bug 1081] AIX port does not support group allow/ deny via nss_ldap
...Version: 3.9p1
Platform: PPC
OS/Version: AIX
Status: NEW
Severity: normal
Priority: P2
Component: sshd
AssignedTo: bitbucket at mindrot.org
ReportedBy: paul.moore at centrify.com
if the platform does not support getgrouplist directly then sshd uses getgrent
to enumerate group membership (for group allow / deny). The AIX version of this
API only supports /etc/group and NIS and so the group features do not work with
other naming providers (nss_ldap say).
The AIX port should use getuserattr(user, S_GROUPS, ..), this u...
2001 May 22
1
[PATCH]: configure.in: Missing check for setvbuf
...figure.in 2001/05/17 03:32:51 1.286
+++ configure.in 2001/05/22 11:59:54
@@ -460,7 +460,7 @@ AC_ARG_WITH(tcp-wrappers,
)
dnl Checks for library functions.
-AC_CHECK_FUNCS(arc4random atexit b64_ntop bcopy bindresvport_sa clock fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getnameinfo getrlimit getrusage getttyent getusershell glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid sigaction sigvec snprintf...
2004 Oct 25
1
failed to cross compile 3.0.7
Hi, All,
I try to crosee compile 3.0.7 for mips, but failed and
got the following message:
Configure: error: cannot run test program while cross
compiling
Can anybody give me a hint about what I did may be
wrong?
Thanks
Youren
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
2004 Jan 23
2
3.0.2rc1, LDAP, Solaris 9 and secondary group problem - Bug 395?
...bug report
and the configuration of the server is a bit different:
* no winbind
* Sun LDAP client instead of nss_ldap from Padl
* no problem on Solaris 8 but on Solaris 9
I have a second question regarding the test program from Hansj?rg.
The program compiles on Linux, but no succes on Solaris. Is getgrouplist()
available under Solaris? And if not, what is the replacement.
Thanks in advance,
Reinhard
--
Reinhard Sojka <reinhard.sojka@parlinkom.gv.at>
System- & Networkadmin
Parlamentsdirektion
+43 1 40110 2824
2015 Jan 06
2
[Bug 11035] New: make check failure
...c -I. -I. -I./zlib -I./popt -g -O2 -DHAVE_CONFIG_H -Wall -W -c uidlist.c -o
uidlist.o
uidlist.c:533:44: warning: passing 'gid_t *' (aka 'unsigned int *') to
parameter of type 'int *' converts between pointers to integer types with
different sign [-Wpointer-sign]
if (getgrouplist(pw->pw_name, pw->pw_gid, gid_list, size_ptr) < 0)
^~~~~~~~
/usr/include/unistd.h:648:43: note: passing argument to parameter here
int getgrouplist(const char *, int, int *, int *);
^
1 warn...
2003 Mar 31
2
basename() in libgen
IRIX 6.5 has the basename() function in libgen.
SYNOPSIS
cc [flag ...] file ... -lgen [library ...]
#include <libgen.h>
char *basename (char *path);
-- ayamura
2001 Sep 29
0
configure.in fixes for 2.9.9p2
...t want to check if we did an pcre override.
if test -z "$no_comp_check" ; then
@@ -481,7 +494,14 @@
)
dnl Checks for library functions.
-AC_CHECK_FUNCS(arc4random atexit b64_ntop bcopy bindresvport_sa clock dirname fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getopt getnameinfo getrlimit getrusage getttyent glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty readpassphrase realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid setvbuf sigactio...
2007 Feb 26
1
Cross-compiling for ARM with 3.0.24
Hello all,
I am attempting to cross-compile Samba 3.0.24 for the ARM
platform using on an Ubuntu Dapper box using arm-linux-gcc 3.4.0. I
am using the following script to call configure:
#!/bin/bash
ac_cv_func_prctl=no
linux_getgrouplist_ok=no
./configure --without-krb5 --without-ldap --without-ads --disable-cups
--without-swat --prefix=/home/tropem/samba-build --host=arm-linux
--build=i386-linux
The console error is:
checking for __open64... yes
checking for creat64... yes
checking for prctl... yes
configure: error: cannot run t...
2006 May 04
2
xmalloc(foo*bar) -> xcalloc(foo, bar) for Portable
...MAX(NGROUPS_MAX, sysconf(_SC_NGROUPS_MAX));
#endif
- groups_bygid = xmalloc(ngroups * sizeof(*groups_bygid));
- groups_byname = xmalloc(ngroups * sizeof(*groups_byname));
+ groups_bygid = xcalloc(ngroups, sizeof(*groups_bygid));
+ groups_byname = xcalloc(ngroups, sizeof(*groups_byname));
if (getgrouplist(user, base, groups_bygid, &ngroups) == -1)
logit("getgrouplist: groups list too small");
Index: monitor.c
===================================================================
RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/monitor.c,v
retrieving revision 1.102
diff -u -p -...
2012 Mar 06
6
openssh static build - mission impossible?
...FIPSCHECK_verify':
(.text+0x20): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
groupaccess.o: In function `ga_init':
/builddir/build/BUILD/openssh-5.6p1/groupaccess.c:66: warning: Using 'getgrouplist' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
session.o: In function `do_setusercontext':
/builddir/build/BUILD/openssh-5.6p1/session.c:1509: warning: Using 'initgroups' in statically linked applications requires...
2011 Aug 19
1
Password sync in 3.6.0 on OS X 10.7, Lion
...using numerous problems.
Yesterday, I succeeded in getting Samba 3.6.0 compiled and running on
Lion, and now have a working Macports package. Only one patch was
required: to address issues with NGROUPS_MAX on Lion, which prevented
smbd from starting. (FYI: Because groups can be nested in Lion, but
getgrouplist() reports the list without nesting, the number of groups in
some system account used by Samba, exceeds NGROUPS_MAX. The fix just
forces it to 32 in lib/system.c - ugly, but it works).
I do not understand how Apple's OpenDirectory integration used to work
with Samba in versions <= 10.6. I as...
2003 Sep 17
5
problems with 3.7.1p1 on IRIX (again)
Hi,
I've seen a few messages re. problems with 3.7.1p1 on IRIX 6.5...
I'm using 6.5.19 and having no trouble compiling, installing and
starting, but sshd just closes the connection with no explanation.
debug/verbose modes don't seem to give any clues.
Darren Tucker suggested defining BROKEN_GETADDRINFO in config.h,
but I find that compilation then fails (assuming I've implemented
2001 Feb 12
5
SCO OS3 build broken (CVS 01/12/01)
It looks like something got broken in openbsd-compat/bsd-snprintf.c
...
gcc -g -O2 -Wall -Dftruncate=chsize -I/usr/local/include -I/usr/local/ssl/includ
e -I. -I.. -I../src/openbsd-compat -I../src/openbsd-compat/.. -DHAVE_CONFIG_H -c
../src/openbsd-compat/bsd-snprintf.c
In file included from ../src/openbsd-compat/bsd-snprintf.c:72:
2015 Aug 18
1
[Bug 11456] New: Allow configuration of MAX_GID_LIST
...Component: core
Assignee: wayned at samba.org
Reporter: jheiss at aput.net
QA Contact: rsync-qa at samba.org
MAX_GID_LIST is a constant in clientserver.c with a value of 32. I have users
who are in more than 32 groups, resulting in
want_all_groups->getallgroups->getgrouplist failing. I'll just change the
constant in my local build for now, but a way to configure the limit would be
nice.
--
You are receiving this mail because:
You are the QA Contact for the bug.
2002 Oct 25
0
NeXT Community
...========================================================
RCS file: /var/cvs/openssh/configure.ac,v
retrieving revision 1.89.2.2
diff -u -r1.89.2.2 configure.ac
--- configure.ac 16 Oct 2002 00:25:40 -0000 1.89.2.2
+++ configure.ac 25 Oct 2002 14:08:43 -0000
@@ -601,12 +601,15 @@
getaddrinfo getcwd getgrouplist getnameinfo getopt getpeereid\
getrlimit getrusage getttyent glob inet_aton inet_ntoa \
inet_ntop innetgr login_getcapbool md5_crypt memmove \
- mkdtemp mmap ngetaddrinfo openpty ogetaddrinfo readpassphrase \
+ mkdtemp ngetaddrinfo openpty ogetaddrinfo readpassphrase \
realpath recvmsg rresvp...