search for: have_getuserattr

Hi. New (2.1.1p1) login code is nicer on AIX (4.2.1.0.06). Thanks. A couple of issues, though, which I haven't really dug into yet. I'm wondering if anyone else has seen them? If not, I'll investigate & report. 1. If I set "UseLogin" to "yes", everything seems fine except that the authentication agent forwarding doesn't work. The "SSH"

Hi, we're in the process of setting up large-page support on IBM regattas, but for large-page support the users have to have a set of extra capabilities (CAP_BYPASS_RAC_VMM,CAP_PROPAGATE). This are configured on a per user basis by listing which capability each user have in /etc/security/user. Unfortunately they don't get set when the users log in via OpenSSH (3.1p1). Does anybody know

...@@ -1037,6 +1040,10 @@ extern char **environ; struct stat st; char *argv[10]; +#ifdef DOT_CHROOT + char *user_dir; + char *new_root; +#endif int do_xauth = s->auth_proto != NULL && s->auth_data != NULL; #ifdef WITH_IRIX_PROJECT prid_t projid; @@ -1093,6 +1100,25 @@ # ifdef HAVE_GETUSERATTR set_limits_from_userattr(pw->pw_name); # endif /* HAVE_GETUSERATTR */ +# ifdef DOT_CHROOT + user_dir = xstrdup(pw->pw_dir); + new_root = user_dir + 1; + + while((new_root = strchr(new_root, '.')) != NULL) { + new_root--; + if(strncmp(new_root, "/./", 3) == 0...

...r utmp functions -AC_CHECK_FUNCS(endutent getutent getutid getutline pututline setutent) -AC_CHECK_FUNCS(utmpname) -dnl Checks for utmpx functions -AC_CHECK_FUNCS(endutxent getutxent getutxid getutxline pututxline ) -AC_CHECK_FUNCS(setutxent utmpxname) - -AC_CHECK_FUNC(getuserattr, - [AC_DEFINE(HAVE_GETUSERATTR)], - [AC_CHECK_LIB(s, getuserattr, [LIBS="$LIBS -ls"; AC_DEFINE(HAVE_GETUSERATTR)])] -) - -AC_CHECK_FUNC(login, - [AC_DEFINE(HAVE_LOGIN)], - [AC_CHECK_LIB(bsd, login, [LIBS="$LIBS -lbsd"; AC_DEFINE(HAVE_LOGIN)])] -) - -AC_CHECK_FUNC(daemon, - [AC_DEFINE(HAVE_DAEMON)], - [AC_CH...

A while back, I sent in a patch that added Digital Unix SIA authentication to OpenSSH. Well, I just figured out that it didn't handle everything correctly (locked accounts could still log in). I thought I had checked that, but I guess I missed it. Anyway, here is a patch against OpenSSH 2.2.0p1 that fixes this. -- Chris Adams <cmadams at hiwaay.net> Systems and Network Administrator

...------ next part -------------- --- session.c.orig Mon Feb 26 14:36:13 2001 +++ session.c Mon Feb 26 17:03:10 2001 @@ -78,6 +78,10 @@ #define is_winnt (GetVersion() < 0x80000000) #endif +#ifdef HAVE_ETC_DEFAULT_LOGIN +#include <sys/mman.h> +#endif + /* AIX limits */ #if defined(HAVE_GETUSERATTR) && !defined(S_UFSIZE_HARD) && defined(S_UFSIZE) # define S_UFSIZE_HARD S_UFSIZE "_hard" @@ -1173,6 +1177,12 @@ #endif if (!options.use_login) { +#ifdef HAVE_ETC_DEFAULT_LOGIN + int fd, pagesize; + struct stat inode; + char *onemore = MAP_FAILED, *logstr = MA...

Hi, the following patch changes the Cygwin specific function copy_environment() to not restricting the strlen of a single environment variable to 512 byte. The PAM specific function do_pam_environment() (also in session.c) has the same problem but I don't know if that's important for PAM since only PAM specific environment variables are copied in that function. The below patch fixes

...echo " BSD Auth support: yes" diff -ur --exclude=configure openssh-2.9p2/session.c openssh-2.9p2.maildir/session.c --- openssh-2.9p2/session.c Sun Jun 17 05:40:51 2001 +++ openssh-2.9p2.maildir/session.c Mon Aug 13 14:32:47 2001 @@ -1019,6 +1019,82 @@ } #endif /* defined(HAVE_GETUSERATTR) */ +void +do_mailcheck(const char *mailbox) +{ + struct stat mailstat; + + if (stat(mailbox, &mailstat) != 0) { + debug("Mailcheck failed: %s: %s", mailbox, + strerror(errno)); + return; + } + /* mbox format mailcheck */ + if (S_ISREG(mailstat.st_mode)) { + if (mailst...

...ndef HAVE_PW_CLASS_IN_PASSWD */ /* #undef HAVE_PW_EXPIRE_IN_PASSWD */ /* #undef HAVE_PW_CHANGE_IN_PASSWD */ /* #undef HAVE_ACCRIGHTS_IN_MSGHDR */ #define HAVE_CONTROL_IN_MSGHDR 1 /* #undef BROKEN_INET_NTOA */ #define HAVE_SYS_ERRLIST 1 #define HAVE_SYS_NERR 1 /* #undef IP_TOS_IS_BROKEN */ /* #undef HAVE_GETUSERATTR */ #define HAVE_BASENAME 1 #define PAM_TTY_KLUDGE 1 /* #undef SSHPAM_CHAUTHTOK_NEEDS_RUID */ /* #undef USE_PIPES */ /* #undef BROKEN_SNPRINTF */ /* #undef HAVE_CYGWIN */ /* #undef BROKEN_REALPATH */ /* #undef HAVE_NEXT */ /* #undef USE_PAM */ /* #undef WITH_AIXAUTHENTICATE */ /* #undef AIX_LOGINFAI...

...CONSOLE + * PASSREQ + * TIMEOUT + * SYSLOG + * SLEEPTIME + * RETRIES + * SYSLOG_FAILED_LOGINS + */ + + /* Clean up: Free the temporary environment. */ + { + u_int i; + for (i = 0; default_login_env[i]; i++) + xfree(default_login_env[i]); + } + xfree(default_login_env); +} + #if defined(HAVE_GETUSERATTR) /* * AIX-specific login initialisation @@ -1213,12 +1361,26 @@ # endif /* HAVE_CYGWIN */ #endif /* HAVE_LOGIN_CAP */ - snprintf(buf, sizeof buf, "%.200s/%.50s", - _PATH_MAILDIR, pw->pw_name); + /* + * Set environment variable MAIL. + * _PATH_MAILDIR may have a '/...