search for: pfaffel

Hello openssh-unix-dev list members, This is related to my previous post, but I need to ask specific questions. I'm building openssh with iPhone Toolchain (http://wikee.iphwn.org/howto:toolchain_on_leopard_aspen) for iPhone 2.1 firmware. This is not an iPhone mailing list, but probably anyone with deep knowledge of openssh could give a hint. So this is what I do: 1. I patch the files using

Hi, I have an auth module for PAM that I wrote a few years ago called pam_vsd.so. The idea is that a user must have a certain privilege before they can successfully authenticate. Without the privilege the PAM module will return PAM_PERM_DENIED. However I find that in OpenSSH 3.7.1p2, I can easily subvert this check simply by hitting return 3 times on connection i.e. [nick at localhost

...out, that the transferred Kerberos credentials got stored after the pam_session module was executed. I therefor created the attached small patch, which makes it work for me. I am sure that it is not an elegant method, but... If there is a different way to go please let me know. regards, Christian Pfaffel -- Christian Pfaffel <flash at itp.tu-graz.ac.at> Technische Universit?t Graz Telefon: +43 / 316 / 873 - 81 90 Institut f?r Theoretische Physik Telefax: +43 / 316 / 873 - 86 78 Petersgasse 16, A-8010 Graz http://fubphpc.tu-graz.ac.at/~flash/pubkey.gpg

...import_environments entering buffer_get: trying to get more bytes 4 than in buffer 0 debug1: do_cleanup debug1: PAM: cleanup debug3: PAM: sshpam_thread_cleanup entering debug1: do_cleanup debug1: PAM: cleanup debug3: PAM: sshpam_thread_cleanup entering - I tried applying the patches that Christian Pfaffel posted. But they did not produce any different results than the unpatched version. It did not matter whether the UsePAMSetCred option was set to yes or no. My configuration looks like this: ./configure --prefix=/usr/ssh --with-pam --with-tcp-wrappers=/usr/local --sysconfdir=/etc/ssh --with-...

...The default option (authenticating in a child process) has a serious problem -- authentication changes PAM's state, but the new state won't get transferred from the child to the parent unless you add new hacks to explicitly transfer each bit and piece that you want. For example, Christian Pfaffel posted a patch to this list on 9-17 with hacks to force Kerberos credentials to disk and to use ssh_msg_send() to send the PAM environment from the child process to the parent. (His patch was in an attachment and got dropped. But fortunately he re-posted his message to the MIT Kerberos newsgroup...

...on-text attachment was scrubbed... Name: openssh-pam-privsep.patch Type: text/x-patch Size: 1171 bytes Desc: GSSAPIAuth PAM and PrivSep Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20040527/d7678ac6/attachment-0001.bin -------------- next part -------------- -- Christian Pfaffel <flash at itp.tu-graz.ac.at> Technische Universit?t Graz Telefon: +43 / 316 / 873 - 81 90 Institut f?r Theoretische Physik Telefax: +43 / 316 / 873 - 86 78 Petersgasse 16, A-8010 Graz http://fubphpc.tu-graz.ac.at/~flash/pubkey.gpg

Hello all, I propose the following patch to ssh-keygen.c for openssh version 4.5. It allows to redirect output of the moduli operations to stdout, to do something like e.g.: $ ssh-keygen -G - -b 2048 | ssh-keygen -T - -f - >moduli Best regards, Christian --- ssh/ssh-keygen.c.old 2007-03-01 12:43:06.000000000 +0100 +++ ssh/ssh-keygen.c 2007-03-01 12:47:32.000000000 +0100 @@ -1270,13