search for: pam_getenvlist

...--with-pam Generates Makefile then compiles and installs. Dynamically compiled OpenSSL files in /opt/openssl-0.9.6d-sh gmake clean;./configure --prefix=/opt/openssh323p1 --with-ssl-dir=/opt/openssl- 0.9.6d-sh --with-zlib=/opt/zlib --with-pam checking for pam_set_item in -lpam... yes checking for pam_getenvlist... yes checking whether pam_strerror takes only one argument... no configure: error: *** Can't find recent OpenSSL libcrypto (see config.log for details) *** Here are the last 8 lines from config.log: #define HAVE_INTTYPES_H 1 #define HAVE_UNISTD_H 1 #define GETPGRP_VOID 1 #define HAVE_LIBDL...

...erpt below: #if defined(HAVE_ADDR_IN_UTMPX) if (addr) { /* Added a brace here - Ged */ switch (addr->sa_family) { Solution for Makefile: Changed Makefile.in and added $(CFLAGS) to the compile lines for all the executables. Solution for sshd: HP-UX does not have a pam_getenvlist call. Changed the fetch_pam_environment function to return NULL if _HPUX_SOURCE was defined. /* Return list of PAM environment strings */ char **fetch_pam_environment(void) { #ifndef _HPUX_SOURCE /* HP-UX has not implemented this */ return(pam_getenvlist((pam_handle_t *)pamh)); #else r...

..."ssh"); if (pam_retval != PAM_SUCCESS) { fatal("PAM set tty failed: %.200s", - PAM_STRERROR((pam_handle_t *)pamh, pam_retval)); + PAM_STRERROR(pamh, pam_retval)); } #endif /* PAM_TTY_KLUDGE */ @@ -268,7 +320,7 @@ char **fetch_pam_environment(void) { #ifdef HAVE_PAM_GETENVLIST - return(pam_getenvlist((pam_handle_t *)pamh)); + return(pam_getenvlist(pamh)); #else /* HAVE_PAM_GETENVLIST */ return(NULL); #endif /* HAVE_PAM_GETENVLIST */ =================================================================== RCS file: RCS/auth-pam.h,v retrieving revision 1.1 diff -u -r1.1 aut...

...shd[755]: Did not receive ident string from <client-ip>. Any suggestions? This happens if I connect using OpenSSH from the same box or another one (running the Linux version of OpenSSH). BTW: OpenSSH didn't compile out-of-the-box. I had to disable PAM support (HP-UX 11.00 seems to lack pam_getenvlist) and manually add "-lsec" to the list of libraries. In addition, EGD behaves a bit strange (it dies almost instantly when started from the rc scripts). -- Florian Weimer Florian.Weimer at RUS.Uni-Stuttgart.DE University of Stuttgart http://cert.uni-stuttgar...

...nused @@ -118,6 +119,7 @@ static int sshpam_authenticated = 0; static int sshpam_new_authtok_reqd = 0; static int sshpam_session_open = 0; static int sshpam_cred_established = 0; +static int sshpam_account_status = -1; static char **sshpam_env = NULL; struct pam_ctxt { @@ -144,6 +146,21 @@ pam_getenvlist(pam_handle_t *pamh) } #endif +void +pam_password_change_required(int reqd) +{ + sshpam_new_authtok_reqd = reqd; + if (reqd) { + no_port_forwarding_flag |= 2; + no_agent_forwarding_flag |= 2; + no_x11_forwarding_flag |= 2; + } else { + no_port_forwarding_flag &= ~2; + no_agent_forwardin...

...h(0, NULL), sshpam_err)); } /* @@ -706,7 +803,7 @@ compound = xmalloc(len); snprintf(compound, len, "%s=%s", name, value); - ret = pam_putenv(sshpam_handle, compound); + ret = pam_putenv(grab_pamh(0, NULL), compound); xfree(compound); #endif @@ -724,7 +821,7 @@ { #ifdef HAVE_PAM_GETENVLIST debug("PAM: retrieving environment"); - return (pam_getenvlist(sshpam_handle)); + return (pam_getenvlist(grab_pamh(0, NULL))); #else return (NULL); #endif

...ot;-L/lib/security -L/lib -L/usr/local/ssl -L/lib" There may be little overhead now.. The problem occurs during compilation with both openssl-0.9.6beta3 and openssl-0.9.6. I attached config.log for debugging.. Error msg printed to STDERR is: checking for dlopen in -ldl... yes checking for pam_getenvlist... no checking whether pam_strerror takes only one argument... no checking for OpenSSL directory... configure: error: Could not find working SSLeay / OpenSSL libraries, please install Surely, I simply overlooked or misunderstood something, but I can't figure out what.. Hopefully waiting for...

...king for pututxline... no checking for setutxent... no checking for utmpxname... no checking for login... (cached) yes checking for daemon... yes checking for getpagesize... yes checking whether snprintf correctly terminates long strings... yes checking for dlopen in -ldl... no checking for pam_getenvlist... yes checking whether pam_strerror takes only one argument... no checking for OpenSSL directory... /usr/local/ssl checking for RSA support... yes checking size of char... 1 checking size of short int... 2 checking size of int... 4 checking size of long int... 4 checking size of long long...

...ing for memory.h... yes checking for strings.h... (cached) yes checking for inttypes.h... yes checking for stdint.h... (cached) no checking for unistd.h... yes checking whether getpgrp takes no argument... yes checking for dlopen in -ldl... yes checking for pam_set_item in -lpam... yes checking for pam_getenvlist... yes checking whether pam_strerror takes only one argument... no checking for OpenSSL directory... /usr/local/ssl checking for RSA support... yes checking whether OpenSSL's headers match the library... yes checking whether OpenSSL's PRNG is internally seeded... yes ./configure: syntax err...

I have some troubles with subj and proper utmpx/wtmpx functionality. After successfull ssh connect to Solaris 8 box, I run #w 11:59am up 13:45, 1 user, load average: 0.00, 0.01, 0.02 User tty login@ idle JCPU PCPU what root console 11:43am 9 bash # Record about my pts/1 login is absent. Next command I run from Solaris 8 console

...checking for pututxline... yes checking for setutxent... yes checking for utmpxname... yes checking for login... (cached) yes checking for daemon... yes checking for getpagesize... yes checking whether snprintf correctly terminates long strings... yes checking for dlopen in -ldl... yes checking for pam_getenvlist... yes checking whether pam_strerror takes only one argument... no checking for OpenSSL directory... /usr/local/ssl checking for RSA support... yes checking size of char... 1 checking size of short int... 2 checking size of int... 4 checking size of long int... 4 checking size of long long int... 8...

...dlopen, , ) - AC_CHECK_LIB(pam, pam_set_item, , AC_MSG_ERROR([*** libpam missing])) + AC_CHECK_LIB(dl, dlopen, AUTH_LIBS="-ldl $AUTH_LIBS", ) + AC_CHECK_LIB(pam, pam_set_item, AUTH_LIBS="-lpam $AUTH_LIBS", AC_MSG_ERROR([*** libpam missing]), $AUTH_LIBS) AC_CHECK_FUNCS(pam_getenvlist) @@ -743,3 +747,3 @@ if test "x$PAM_MSG" = "xno" -a "x$check_for_libcrypt_later" = "x1"; then - AC_CHECK_LIB(crypt, crypt, LIBS="$LIBS -lcrypt") + AC_CHECK_LIB(crypt, crypt, AUTH_LIBS="$AUTH_LIBS -lcrypt") fi @@ -2047,2 +2051,4 @@ AC_EX...

...amp; test -s conftest${ac_exeext}; then +if { (eval echo configure:2615: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then rm -rf conftest* eval "ac_cv_lib_$ac_lib_var=yes" else @@ -2641,12 +2643,12 @@ for ac_func in pam_getenvlist do echo $ac_n "checking for $ac_func""... $ac_c" 1>&6 -echo "configure:2645: checking for $ac_func" >&5 +echo "configure:2647: checking for $ac_func" >&5 if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+se...

...amp; test -s conftest${ac_exeext}; then +if { (eval echo configure:2682: \"$ac_link\") 1>&5; (eval $ac_link) 2>&5; } && test -s conftest${ac_exeext}; then rm -rf conftest* eval "ac_cv_lib_$ac_lib_var=yes" else @@ -2708,12 +2710,12 @@ for ac_func in pam_getenvlist do echo $ac_n "checking for $ac_func""... $ac_c" 1>&6 -echo "configure:2712: checking for $ac_func" >&5 +echo "configure:2714: checking for $ac_func" >&5 if eval "test \"`echo '$''{'ac_cv_func_$ac_func'+se...