search for: seteuid

Please, I can`t see my messages. Can anyone confirm if it is reaching to the list? Thnaks! ?lvaro ----- Original Message ----- From: Alvaro Lassance <lassance@sidercom.com.br> To: <samba@lists.samba.org> Sent: Thursday, December 27, 2001 1:39 PM Subject: SETEUID > > > Hello! > > > > Anyone knows how I install the "seteuid method" in a RH 7.0? > > When I try to compile the Samba the Linux say that it needs this package. > > > > Thanks in advance > > > > Alvaro > > >

Hey Everyone: "No seteuid method available" is the error I get when trying to configure Samba 2.2.2 on an HP-UX 11.0 system. This system is part of a test network and has tcp/ip but no DNS. There are only 3 articles on the Samba site about this and the only fix requires changing and recompiling "C" libraries....

...sue with white space. - Ben --- ../openssh/uidswap.c Sun Apr 22 06:58:50 2001 +++ uidswap.c.new Tue Apr 24 20:13:22 2001 @@ -26,17 +26,21 @@ * POSIX saved uids or not. */ +#if defined(_POSIX_SAVED_IDS) && !defined(BROKEN_SAVED_UIDS) /* Lets assume that posix saved ids also work with seteuid, even though that is not part of the posix specification. */ - +#define SAVED_IDS_WORK_WITH_SETEUID +/* Saved effective uid. */ +static uid_t saved_euid = 0; +static gid_t saved_egid = 0; +#endif + /* Saved effective uid. */ static int privileged = 0; static int temporarily_use_uid_effectiv...

...envp: TZ=BST11 SSH_CLIENT=<IP> 1471 22 SSH_TTY=/dev/pts/31 27066: TERM=vt100 Do you have any ideas what I can define in order to fix this problem? I also found what I believe might be a bug in uidswap.c at line 88. It used to look like: ----- #ifndef SAVED_IDS_WORK_WITH_SETEUID /* Propagate the privileged gid to all of our gids. */ if (setgid(getegid()) < 0) debug("setgid %u: %.100s", (u_int) getegid(), strerror(errno)); /* Propagate the privileged uid to all of our uids. */ if (setuid(geteuid()) < 0)...

...ameters) on Slackware 8.0.0 (Linux 2.4.19 SMP) using gcc version "2.95.3 20010315 (release)". End of output: Using libraries: LIBS = -lcrypt -lresolv -lnsl -ldl AUTH_LIBS = -lcrypt checking configure summary... WARNING: No automated network interface determination ERROR: no seteuid method available configure: error: summary failure. Aborting config The config.log is available at: http://kevindegraaf.net/config.log.gz (32 KB). Any ideas? -- Kevin DeGraaf

...ce tree, not least of all since I didn't worry about #ifdef's or the configure scripts. However hopefully this will be of use to you. This is all for openssh-2.2.0p1 compiled alongside openssl-0.9.5a and zlib-1.1.3. Under HP-UX =========== uname -smr HP-UX A.09.03 9000/735 There is no seteuid or setreuid, but there is a setresuid, so using your model in bsd-misc.c, I did: ----------- #if !defined(HAVE_SETEUID) && defined(HAVE_SETREUID) int seteuid(uid_t euid) { return(setreuid(-1,euid)); } #endif /* !defined(HAVE_SETEUID) && defined(HAVE_SETREUID) */ /* JPK */ i...

Sorry if I'm duplicating an existing patch, but... On systems with no seteuid() that have setreuid() there is an emulation, but if both are lacking (but we do have setresuid()), nothing is done. The following seems to be right, but I've only got one machine (running an ancient version of HP-UX) which needs this so it may not be general: --cut-here-- --- config.h.in.ori...

Any way to check if another proc has run or been run by a proc that is setuid or seteuid?

Why does dovecot mount the user home directory whenever the user checks his email (either pop or imap)? Is there a way to disable this? I have indicated in the default_mail_env = mbox:/home/%u/:INBOX=/mail/%u:INDEX=MEMORY. The users are in ldap. Windows users' home is in /home/%u so this is ok but unix users' home are in their local computers and are mounted (via automount) at

...*** uidswap.c Thu Apr 26 15:10:15 2001 --- uidswap.c.new Mon Oct 8 11:33:42 2001 *************** *** 85,91 **** if (setgroups(user_groupslen, user_groups) < 0) fatal("setgroups: %.100s", strerror(errno)); #endif /* !HAVE_CYWIN */ ! #ifndef SAVED_IDS_WORK_WITH_SETEUID /* Propagate the privileged gid to all of our gids. */ if (setgid(getegid()) < 0) debug("setgid %u: %.100s", (u_int) getegid(), strerror(errno)); --- 85,98 ---- if (setgroups(user_groupslen, user_groups) < 0) fatal("setgro...

...figured with --with-prngd-socket=/tmp/entropy). * Compiling required some changes, which I've attached. Two of the changes are "hackish", and not at all suited to inclusion in the source tree, but they might point someone in the right direction for a more robust solution. The seteuid() "hack" isn't too bad, though the comments are a bit excessive. (Upshot: HP-UX 9.05 has setuid() and setresuid() but not seteuid() or setreuid(); RLIMIT_CORE is only defined if _KERNEL is defined (it's labeled "unsupported BSD stuff" in <sys/resource.h>);...

...egid=100(users) missing +w perm: /var/run/dovecot//auth-userdb, euid is not dir owner) doveadm: Error: Failed to iterate through some users [root at r13151 ~]# chmod og+w /var/run/dovecot/auth-userdb [fakessh at r13151 ~]$ doveadm expunge -A mailbox Trash savedbefore 30d doveadm(dkimproxy): Fatal: seteuid(0) failed: Operation not permitted [fakessh at r13151 ~]$ any kind of discussion would be welcome -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 -------------- next part -------------- A non-text attachment was scrubbed... Nam...

...to localhost (LynxOS) or remote sshd in Linux, the authentication succeeds, prints sftp> prompt and then exits. I don't know why this happens. The problem is with the sftp client program in LynxOS. Does it work for anyone (sftp client program in LynxOS)? 2. Does anyone use ssh client with seteuid to root? and it still works? or is there a problem with LynxOS that seteuid() doesn't work with _POSIX_SAVED_IDS? 3. One more problem. sshd run on LynxOS and ssh client from Linux system. ssh client hangs on exit. $ssh hari at lynx (From Linux) password: lynx>... lynx>exit hangs .........

...on to machine2 closed by remote host. Connection to machine2 closed. Transferred: sent 2336, received 2880 bytes, in 0.0 seconds Bytes per second: sent 1167945.4, received 1439932.7 debug1: Exit status -1 *************************** Some of the output from remote host OpenSSHD.log. It says "seteuid 1084961: Operation not permitted" as seen below at the end. ********************* ... debug1: kex: algorithm: curve25519-sha256 at libssh.org debug1: kex: host key algorithm: ecdsa-sha2-nistp521 debug1: kex: client->server cipher: chacha20-poly1305 at openssh.com MAC: <implicit> co...

...uidswap.c 16 Sep 2003 14:47:54 -0000 @@ -191,10 +191,12 @@ permanently_set_uid(struct passwd *pw) (u_int)pw->pw_gid); } +#ifdef HAVE_CYGWIN /* Try restoration of UID if changed (test clearing of saved uid) */ if (old_uid != pw->pw_uid && (setuid(old_uid) != -1 || seteuid(old_uid) != -1)) fatal("%s: was able to restore old [e]uid", __func__); +#endif /* Verify UID drop was successful */ if (getuid() != pw->pw_uid || geteuid() != pw->pw_uid) { -- Corinna Vinschen Cygwin Developer Red Hat, Inc.

Seteuid now creates user token using S4U. We don't create a token from scratch anymore, so we don't need the "Create a process token" privilege. The service can run under SYSTEM again. --- contrib/cygwin/ssh-host-config | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletion...

...agged openssh-2.5.1p1, went thru it again, only to find ssh fatals out w/ Couldn't restore privileges. Non-root suid ssh works just fine. An archive search shows others have the same problem. Haven't seen a diagnosis or patch yet. In the meantime, how bad would it be to #comment out the seteuid change and restore at the bottom of entropy.c? Jack

...installing samba 2.2.6 on a HPUX 11.11 - machine: when i unzip and install the samba 2.2.6 and then start configuring ist with "./configure --prefix=/usr/local/samba" i get the following error: checking configure summary... WARNING: No automated network interface determination ERROR: no seteuid method available configure: error: summary failure. Aborting config can anyone help?? thanks in advance! TB

...command: %s (%m)"), cmd); + return -1; + } + + if (WEXITSTATUS (r) != 0) { error (g, _("external command failed: %s"), cmd); return -1; } @@ -463,3 +537,45 @@ dir_contains_files (const char *dir, ...) va_end (args); return 1; } + +/* Launch may be called by a seteuid/setegid process (virt-v2v does this). + * Unfortunately, execve resets EGID/EUID to GID/UID. This means that files + * created by a subprocess will have the wrong ownership. To work round this, + * we set the real GID/UID first before exec. */ +static pid_t fork_helper(guestfs_h *g) +{ + pid_t pid...

...efs.h sys/poll.h sys/select.h sys/stropts.h sys/sysmacros.h sys/time.h sys/ttcompat.h stddef.h util.h utmp.h utmpx.h) # Checks for library functions. -AC_CHECK_FUNCS(arc4random bindresvport_af freeaddrinfo gai_strerror getaddrinfo getnameinfo innetgr md5_crypt mkdtemp openpty rresvport_af setenv seteuid setlogin setproctitle setreuid snprintf strlcat strlcpy updwtmpx vsnprintf _getpty) +AC_CHECK_FUNCS(arc4random bindresvport_af freeaddrinfo gai_strerror getaddrinfo getnameinfo innetgr md5_crypt mkdtemp openpty pututline rresvport_af setenv seteuid setlogin setproctitle setreuid snprintf strlcat st...