search for: permit_forced_on

...PERMIT_NO_PASSWD: - if (strcmp(method, "password") != 0) + if (strcmp(method, "password") != 0 + && strcmp(method, "keyboard-interactive/pam") != 0) return 1; break; case PERMIT_FORCED_ONLY: diff -r -u openssh-3.7.1p2-vanilla/monitor.c openssh-3.7.1p2/monitor.c --- openssh-3.7.1p2-vanilla/monitor.c Tue Sep 2 23:32:46 2003 +++ openssh-3.7.1p2/monitor.c Mon Nov 17 20:32:33 2003 @@ -306,7 +306,7 @@ authenticated = 0; #ifdef USE_PAM...

...;t run into this...? --- openssh-3.4p1/auth2.c Fri Jun 21 02:21:11 2002 +++ openssh-3.4p1-hap-2/auth2.c Fri Jul 12 15:35:52 2002 @@ -206,6 +206,7 @@ /* Special handling for root */ if (authenticated && authctxt->pw->pw_uid == 0 && + !options.permit_root_login == PERMIT_FORCED_ONLY && !auth_root_allowed(method)) authenticated = 0; ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...return "inet"; - case AF_INET6: - return "inet6"; - case AF_UNSPEC: - return "any"; - default: - return "UNKNOWN"; - } - } - if (code == sPermitRootLogin) { - switch (val) { - case PERMIT_NO_PASSWD: - return "without-password"; - case PERMIT_FORCED_ONLY: - return "forced-commands-only"; - case PERMIT_YES: - return "yes"; - } + u_int i; + + if (val == -1) + return "unset"; + for (i = 0; m[i].key != NULL; i++) { + if (m[i].value == val) + return m[i].key; } - if (code == sProtocol) { + return "UNKNOWN...

Could people please test -current? We will be making a release fairly soon. -d -- | By convention there is color, \\ Damien Miller <djm at mindrot.org> | By convention sweetness, By convention bitterness, \\ www.mindrot.org | But in reality there are atoms and space - Democritus (c. 400 BCE)

OpenSSH 3.0 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. This release contains many portability bug-fixes (listed in the ChangeLog) as well as several new features (listed below). We would like to thank the

Hello, I came across an interoperability problem in OpenSSH 3.0p1 and 3.0.1p1 concerning the AFS token forwarding. That means that the new versions are not able to exchange AFS tokens (and Kerberos TGTs) with older OpenSSH releases (including 2.9p2) and with the old SSH 1.2.2x. In my opinion this problem already existed in Openssh 2.9.9p1, but I have never used this version (I only looked at the