Displaying 1 result from an estimated 1 matches for "oa3".
Did you mean:
a3
2004 Mar 07
1
extra groups passed by openssh - security issue?
...ls supervise.
The configuration:
sshd version OpenSSH_3.7.1p2
Redhat Linux 2.4.20-8smp #1 SMP i686
supervise / daemontools-0.76
I see the following behavior regarding groups:
-bash-2.05b$ ssh mschulz at localhost id -Gn
id: cannot find name for group ID 201
id: cannot find name for group ID 2039
OA3 201 2039
The group my account belongs to is OA3, groups 201 and 2039 do not exist..
(a normal login or su, and 'id -Gn' works as expected)
It turns out that when I run sshd standalone (debug), it works fine -
only when
run under the supervise command I see the strange extra groups.
Thi...