search for: getgrouplist

Displaying 20 results from an estimated 168 matches for "getgrouplist".

2004 Feb 20
24
[Bug 787] Minor security problem due to use of deprecated NGROUPS_MAX in uidswap.c (sshd)
http://bugzilla.mindrot.org/show_bug.cgi?id=787 ------- Additional Comments From openssh_bugzilla at hockin.org 2004-02-20 13:01 ------- Created an attachment (id=548) --> (http://bugzilla.mindrot.org/attachment.cgi?id=548&action=view) NGROUPS patch ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
2007 May 20
0
[Bug 1298] Use of Allow/DenyGroups leads to slow login
...What |Removed |Added ---------------------------------------------------------------------------- CC| |dtucker at zip.com.au --- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2007-05-20 16:59:07 --- sshd uses getgrouplist for this which queries only for the specified user. If the platform doesn't have getgrouplist then the compat code does enumerate all groups. Is your configuration using a native getgrouplist (check config.h for HAVE_GETGROUPLIST)? If so, why doesn't getgrouplist do the same optimization...
2001 Jun 07
0
Patch for systems with no setreuid()
...setrlimit function. */ #undef HAVE_SETRLIMIT --- configure.orig Thu Jun 7 14:12:53 2001 +++ configure Thu Jun 7 14:13:40 2001 @@ -3184,7 +3184,7 @@ fi -for ac_func in arc4random atexit b64_ntop bcopy bindresvport_sa clock fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getnameinfo getrlimit getrusage getttyent getusershell glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid sigaction sigvec snprintf...
2004 Feb 20
1
NGROUPS_MAX on Linux
...list for user with primary (base) and @@ -40,20 +40,33 @@ int ga_init(const char *user, gid_t base) { - gid_t groups_bygid[NGROUPS_MAX + 1]; - int i, j; + gid_t *groups_bygid; + int i; struct group *gr; if (ngroups > 0) ga_free(); - ngroups = sizeof(groups_bygid) / sizeof(gid_t); + getgrouplist(user, base, NULL, &ngroups); + groups_bygid = xmalloc(ngroups * sizeof(*groups_bygid)); + groups_byname = xmalloc(ngroups * sizeof(*groups_byname)); + if (getgrouplist(user, base, groups_bygid, &ngroups) == -1) logit("getgrouplist: groups list too small"); - for (i = 0, j = 0...
2004 Oct 02
12
[Bug 938] "AllowGroups" option and secondary user's groups limit
http://bugzilla.mindrot.org/show_bug.cgi?id=938 Summary: "AllowGroups" option and secondary user's groups limit Product: Portable OpenSSH Version: 3.9p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: major Priority: P2 Component: PAM support AssignedTo: openssh-bugs at
2005 Sep 07
1
[Bug 1081] AIX port does not support group allow/ deny via nss_ldap
...Version: 3.9p1 Platform: PPC OS/Version: AIX Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: bitbucket at mindrot.org ReportedBy: paul.moore at centrify.com if the platform does not support getgrouplist directly then sshd uses getgrent to enumerate group membership (for group allow / deny). The AIX version of this API only supports /etc/group and NIS and so the group features do not work with other naming providers (nss_ldap say). The AIX port should use getuserattr(user, S_GROUPS, ..), this u...
2001 May 22
1
[PATCH]: configure.in: Missing check for setvbuf
...figure.in 2001/05/17 03:32:51 1.286 +++ configure.in 2001/05/22 11:59:54 @@ -460,7 +460,7 @@ AC_ARG_WITH(tcp-wrappers, ) dnl Checks for library functions. -AC_CHECK_FUNCS(arc4random atexit b64_ntop bcopy bindresvport_sa clock fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getnameinfo getrlimit getrusage getttyent getusershell glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid sigaction sigvec snprintf...
2004 Oct 25
1
failed to cross compile 3.0.7
Hi, All, I try to crosee compile 3.0.7 for mips, but failed and got the following message: Configure: error: cannot run test program while cross compiling Can anybody give me a hint about what I did may be wrong? Thanks Youren __________________________________ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail
2004 Jan 23
2
3.0.2rc1, LDAP, Solaris 9 and secondary group problem - Bug 395?
...bug report and the configuration of the server is a bit different: * no winbind * Sun LDAP client instead of nss_ldap from Padl * no problem on Solaris 8 but on Solaris 9 I have a second question regarding the test program from Hansj?rg. The program compiles on Linux, but no succes on Solaris. Is getgrouplist() available under Solaris? And if not, what is the replacement. Thanks in advance, Reinhard -- Reinhard Sojka <reinhard.sojka@parlinkom.gv.at> System- & Networkadmin Parlamentsdirektion +43 1 40110 2824
2015 Jan 06
2
[Bug 11035] New: make check failure
...c -I. -I. -I./zlib -I./popt -g -O2 -DHAVE_CONFIG_H -Wall -W -c uidlist.c -o uidlist.o uidlist.c:533:44: warning: passing 'gid_t *' (aka 'unsigned int *') to parameter of type 'int *' converts between pointers to integer types with different sign [-Wpointer-sign] if (getgrouplist(pw->pw_name, pw->pw_gid, gid_list, size_ptr) < 0) ^~~~~~~~ /usr/include/unistd.h:648:43: note: passing argument to parameter here int getgrouplist(const char *, int, int *, int *); ^ 1 warn...
2003 Mar 31
2
basename() in libgen
IRIX 6.5 has the basename() function in libgen. SYNOPSIS cc [flag ...] file ... -lgen [library ...] #include <libgen.h> char *basename (char *path); -- ayamura
2001 Sep 29
0
configure.in fixes for 2.9.9p2
...t want to check if we did an pcre override. if test -z "$no_comp_check" ; then @@ -481,7 +494,14 @@ ) dnl Checks for library functions. -AC_CHECK_FUNCS(arc4random atexit b64_ntop bcopy bindresvport_sa clock dirname fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgrouplist getopt getnameinfo getrlimit getrusage getttyent glob inet_aton inet_ntoa inet_ntop innetgr login_getcapbool md5_crypt memmove mkdtemp on_exit openpty readpassphrase realpath rresvport_af setdtablesize setenv setegid seteuid setlogin setproctitle setresgid setreuid setrlimit setsid setvbuf sigactio...
2007 Feb 26
1
Cross-compiling for ARM with 3.0.24
Hello all, I am attempting to cross-compile Samba 3.0.24 for the ARM platform using on an Ubuntu Dapper box using arm-linux-gcc 3.4.0. I am using the following script to call configure: #!/bin/bash ac_cv_func_prctl=no linux_getgrouplist_ok=no ./configure --without-krb5 --without-ldap --without-ads --disable-cups --without-swat --prefix=/home/tropem/samba-build --host=arm-linux --build=i386-linux The console error is: checking for __open64... yes checking for creat64... yes checking for prctl... yes configure: error: cannot run t...
2006 May 04
2
xmalloc(foo*bar) -> xcalloc(foo, bar) for Portable
...MAX(NGROUPS_MAX, sysconf(_SC_NGROUPS_MAX)); #endif - groups_bygid = xmalloc(ngroups * sizeof(*groups_bygid)); - groups_byname = xmalloc(ngroups * sizeof(*groups_byname)); + groups_bygid = xcalloc(ngroups, sizeof(*groups_bygid)); + groups_byname = xcalloc(ngroups, sizeof(*groups_byname)); if (getgrouplist(user, base, groups_bygid, &ngroups) == -1) logit("getgrouplist: groups list too small"); Index: monitor.c =================================================================== RCS file: /usr/local/src/security/openssh/cvs/openssh_cvs/monitor.c,v retrieving revision 1.102 diff -u -p -...
2012 Mar 06
6
openssh static build - mission impossible?
...FIPSCHECK_verify': (.text+0x20): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking groupaccess.o: In function `ga_init': /builddir/build/BUILD/openssh-5.6p1/groupaccess.c:66: warning: Using 'getgrouplist' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking session.o: In function `do_setusercontext': /builddir/build/BUILD/openssh-5.6p1/session.c:1509: warning: Using 'initgroups' in statically linked applications requires...
2011 Aug 19
1
Password sync in 3.6.0 on OS X 10.7, Lion
...using numerous problems. Yesterday, I succeeded in getting Samba 3.6.0 compiled and running on Lion, and now have a working Macports package. Only one patch was required: to address issues with NGROUPS_MAX on Lion, which prevented smbd from starting. (FYI: Because groups can be nested in Lion, but getgrouplist() reports the list without nesting, the number of groups in some system account used by Samba, exceeds NGROUPS_MAX. The fix just forces it to 32 in lib/system.c - ugly, but it works). I do not understand how Apple's OpenDirectory integration used to work with Samba in versions <= 10.6. I as...
2003 Sep 17
5
problems with 3.7.1p1 on IRIX (again)
Hi, I've seen a few messages re. problems with 3.7.1p1 on IRIX 6.5... I'm using 6.5.19 and having no trouble compiling, installing and starting, but sshd just closes the connection with no explanation. debug/verbose modes don't seem to give any clues. Darren Tucker suggested defining BROKEN_GETADDRINFO in config.h, but I find that compilation then fails (assuming I've implemented
2001 Feb 12
5
SCO OS3 build broken (CVS 01/12/01)
It looks like something got broken in openbsd-compat/bsd-snprintf.c ... gcc -g -O2 -Wall -Dftruncate=chsize -I/usr/local/include -I/usr/local/ssl/includ e -I. -I.. -I../src/openbsd-compat -I../src/openbsd-compat/.. -DHAVE_CONFIG_H -c ../src/openbsd-compat/bsd-snprintf.c In file included from ../src/openbsd-compat/bsd-snprintf.c:72:
2015 Aug 18
1
[Bug 11456] New: Allow configuration of MAX_GID_LIST
...Component: core Assignee: wayned at samba.org Reporter: jheiss at aput.net QA Contact: rsync-qa at samba.org MAX_GID_LIST is a constant in clientserver.c with a value of 32. I have users who are in more than 32 groups, resulting in want_all_groups->getallgroups->getgrouplist failing. I'll just change the constant in my local build for now, but a way to configure the limit would be nice. -- You are receiving this mail because: You are the QA Contact for the bug.
2002 Oct 25
0
NeXT Community
...======================================================== RCS file: /var/cvs/openssh/configure.ac,v retrieving revision 1.89.2.2 diff -u -r1.89.2.2 configure.ac --- configure.ac 16 Oct 2002 00:25:40 -0000 1.89.2.2 +++ configure.ac 25 Oct 2002 14:08:43 -0000 @@ -601,12 +601,15 @@ getaddrinfo getcwd getgrouplist getnameinfo getopt getpeereid\ getrlimit getrusage getttyent glob inet_aton inet_ntoa \ inet_ntop innetgr login_getcapbool md5_crypt memmove \ - mkdtemp mmap ngetaddrinfo openpty ogetaddrinfo readpassphrase \ + mkdtemp ngetaddrinfo openpty ogetaddrinfo readpassphrase \ realpath recvmsg rresvp...