search for: ssh_gssapi_supported_oid

...atus: NEW Severity: normal Priority: P5 Component: Kerberos support Assignee: unassigned-bugs at mindrot.org Reporter: cjwatson at debian.org Created attachment 2273 --> https://bugzilla.mindrot.org/attachment.cgi?id=2273&action=edit Handle ssh_gssapi_supported_oids in monitor for seccomp sandbox compatibility One of my test installations happens to have "GSSAPIAuthentication yes", and this breaks with the seccomp sandbox. Initially I assumed this was specific to Simon Wilkinson's GSSAPI key exchange patch (which I apply in Debian), but on fur...

...; + gss_OID_set supported; + int present; + OM_uint32 ms; + u_int len; + char *doid = NULL; + + if (!authctxt->valid || authctxt->user == NULL) + return (0); + + mechs = packet_get_int(); + if (mechs == 0) { + debug("Mechanism negotiation is not supported"); + return (0); + } + + ssh_gssapi_supported_oids(&supported); + do { + mechs--; + + if (doid) + xfree(doid); + + doid = packet_get_string(&len); + + if (doid[0] != SSH_GSS_OIDTYPE || doid[1] != len-2) { + logit("Mechanism OID received using the old encoding form"); + oid.elements = doid; + oid.length = len; + } els...

If I am trying to build OpenSSH 6.6 with Kerberos GSSAPI support, do I still need to get Simon Wilkinson's patches? --- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |