search for: smorgrav

Can anyone with Heimdal KrbV verify this? -------------- next part -------------- An embedded message was scrubbed... From: Dag-Erling Smorgrav <des at ofug.org> Subject: Kerberos buglet in OpenSSH-3.3p1 Date: 25 Jun 2002 14:52:10 +0200 Size: 1291 Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20020626/347e123e/attachment.mht

...be upgraded to 5.6.1, which is old enough to be known- good (and not deviate too much from 5.005_03) and yet new enough to incoroporate some of the more useful improvements to have appeared since 1999. If memory serves, it also takes significantly less time to build than 5.8.0. DES -- Dag-Erling Smorgrav - des@ofug.org

An embedded message was scrubbed... From: Tor.Egge at cvsup.no.freebsd.org Subject: sshd unable to restart Date: Sun, 25 May 2003 18:19:08 GMT Size: 2853 Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030528/47273c0e/attachment.mht

Hello all, I'm not able to get Kerberos5 authenticarion work together with PrivSep. According to strace, it seems that the kerberos authentication stage is performed by the user process in chrooted enviroment. The problem is that Kerberos authentication must be done by root. Is anybody working on a fix? (or am I missing something in configuration?) Thanks for any advice. -- Dan

...ttp://www.ofug.org/~des/ > X-Disclaimer: The views expressed in this message do not necessarily > coincide with those of any organisation or company with which I am or have > been affiliated. > To: djm at mindrot.org > Subject: Kerberos buglet in OpenSSH-3.3p1 > From: Dag-Erling Smorgrav <des at ofug.org> > Date: 25 Jun 2002 14:52:10 +0200 > User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/21.2 > > servconf.c includes the wrong header for Kerberos V: > > --- servconf.c 24 Jun 2002 22:46:15 -0000 1.111 > +++ servconf.c 25 Jun 2002 01:16:22 -0000 >...

http://bugzilla.mindrot.org/show_bug.cgi?id=315 Summary: add miissing includes and defines for FREEBSD Product: Portable OpenSSH Version: -current Platform: Other OS/Version: FreeBSD Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org

Hi, The attached patch is a merge of Dag-Erling Smorgrav's PAM support for OpenSSH (from FreeBSD). IMO it is a good deal cleaner than the existing PAM code and I'd like to see it imported soon. The code removes the existing PAM password authentication in favor of doing it all via keyboard-interactive. The diff therefore removes the PAMAuthen...

Hi. It would be of utmost utility if there were a way to cause the sshd "banner" configuration setting to only print the banner in certain circumstances. What I'm actually after is avoiding printing out the banner for non-interactive sessions, so that if I run "ssh somehost ls" I don't get the login banner, but if I just type "ssh somehost" I do (at

I'd like to know if anyone knows of any SSH clients with significant user bases (winscp2, putty, mindterm etc.) which lack support for keyboard-interactive authentication. DES -- Dag-Erling Smorgrav - des at ofug.org

I am having problem with getting the src from the cvs server for a specific date I read the the man page and it said the date format is : "date=[cc]yy.mm.dd.hh.mm.ss This specifies a date that should be used to select the revi- sions that are checked out from the CVS repository. The client will receive the revisions that were in effect at the specified date and time. At present, the date

I have a epox nforce2 motherboard and it has a phy nic built in but I can't use it. when will working driver be available??

A STABLE (not updated since 12/13/02) system shows very strange behavior for devices with a minor mode greater than 256. tcpdump does not work reliably and ls is, uh, "strange", using hex for the minor mode. crw------- 1 root wheel 23, 252 Apr 11 14:29 bpf252 crw------- 1 root wheel 23, 253 Apr 11 14:29 bpf253 crw------- 1 root wheel 23, 254 Apr 11 14:29 bpf254

HELO, My old CRT is a bit broken so I decided to buy new screen. I d like to get an LCD monitor. I also use FreeBSD , X ver.4.2 server and GNOME 2.2. And now my question: Do I have to setup my X for that monitor, or maybe just change name, vendor, refresh modes in my XF86Config ? I am not going to use DVI.... thanks for help MArek

Hi all. I just upgraded my server from 4.7-Stable to 5.0-Release by a full install. Now I hit a problem with the date.. the time goes much faster than normal.. maybe twice as normal... this morning I found the following kernel log in /var/log/messages May 26 17:23:58 jupiter kernel: Timecounter "i8254" frequency 1193182 Hz May 26 17:23:58 jupiter kernel: Timecounter "TSC"

A non-text attachment was scrubbed... Name: openssh.diff Type: text/x-patch Size: 49208 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20020626/8f94fb5b/attachment.bin

...waiting for responses, concurrently (but only the last one started can succeed - the others must be either fail or be left waiting for responses that will never come). Cheers, Nico -- On Wednesday, February 26, 2003, Frank Cusack wrote: > On Sun, Feb 02, 2003 at 01:48:52PM +0100, Dag-Erling Smorgrav wrote: > > My code runs the PAM authentication in a separate thread or process to > > avoid calling the main loop from the conversation function (which > > won't work with privsep anyway). Modules like pam_krb5 where the > > session management stage uses information sto...

Below is a new PAM kbd-int diff based on FreeBSD's code. This code makes PAM kbd-int work with privilege separation. Contrary to what I have previously stated - it *does* handle multiple prompts. What it does not handle is multiple passes through the PAM conversation function, which would be required for expired password changing. I would really appreciate some additional eyes over the

Hi all! I need your help. My server doesn't respond any more. Everything crashed. How can I find out if this is a bug or it is simply overloaded? I don't have much running, just KDE with about 10 programs on each of the 16 desktops, and a few background processes. This seems much, but I often have much more stuff running, and it is not even slow. It does respond when I ping it, but

...n implementing this and whatever associated protocol is necessary to modify server-side group policies over it? -- - Jason Currently at: Home (Fremont, CA) (Partly Cloudy) Everything journalists write is true, except when they write about something you know. -- Dag-Erling Smorgrav, June 1999, FreeBSD-Stable Mailing List

Hello all, The long-mooted PAM merge from FreeBSD is starting _now_. This replaces the PAM password auth kludge that we have used until now with a discrete challenge-response module. This module is invoked via keyboard-interactive for protocol 2 or TIS auth for protocol 1. Warning: this is a large change and will probably break things. It has only been tested with basic password auth modules and