search for: ubsw

http://bugzilla.mindrot.org/show_bug.cgi?id=160 ------- Additional Comments From Nicolas.Williams at ubsw.com 2002-03-13 09:10 ------- Created an attachment (id=40) Debug output, lsof output, etc... ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=188 ------- Additional Comments From Nicolas.Williams at ubsw.com 2002-03-28 02:43 ------- Created an attachment (id=55) Patch to do pw aging in kbd-interactive ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

Hi, I apparently was asleep at the wheel using scp, and accidentally copied a file onto itself. Scp generated an Input/Output error and did not perform the copy. However, now the file is corrupt. Is this a but? Is there anyway to fix the file I messed up? Thanks, Don Gathman 208.396.6675

...instead of 'segments' within lattice commands. (Although I wont forget again, a comment in the segments help file referring to 'lsegments' might help others not to make the same mistake in the future.) My thanks to Renaud Lancelot. Regards, John. John Gavin <john.gavin at ubsw.com>, Quantitative Risk Models and Statistics, UBS Warburg, 6th floor, 100 Liverpool St., London EC2M 2RH, UK. Phone +44 (0) 207 567 4289 Fax +44 (0) 207 568 5352 From: John.Gavin at ubsw.com Date: Mon, 6 Jan 2003 09:08:28 -0000 To: <r-help at stat.math.ethz.ch> Subject: [R] segments w...

...de being evaluated, as I get an error with the first chunk. (label=defFunHdr) Error in parse(file, n, text, prompt) : parse error Execution halted The output from Stangle seems ok i.e. I can execute it without error. I am on R 1.6.0, on Windows NT4. Regards, John. John Gavin <john.gavin at ubsw.com>, Quantitative Risk Models and Statistics, UBS Warburg, 100 Liverpool Street (6th floor), London EC2M 2RH, UK. Phone +44 (0) 207 567 4289 Fax +44 (0) 207 568 5352 Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the i...

...ssed to you at the @wdr.com internet address. On 31st August 2001, this internet address will no longer be applicable to the bank, and you will therefore not receive the e-mail. Please ensure that any people or applications sending e-mails to you using the @wdr.com address, change to using the @ubsw.com internet address. If you need any help, please contact your local TSC or Help Desk. Regards, GMCC ******************************************** Projects Team Global Messaging Control Centre Perot Systems Corporation UBS Warburg e-Mail: alana.thompson at ubsw.com Tel: +44 (0)20 7568 4822 ****...

http://bugzilla.mindrot.org/show_bug.cgi?id=93 ------- Additional Comments From jprondak at visualmedia.com 2002-02-02 08:45 ------- Created an attachment (id=16) ssh-add.c patch to search ssh_config for IdentityFile(s) ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...p, will require #ifdef hacks so that they use the Windows spawn()/CreateProcess() APIs instead of fork()/exec() to run the ssh program. Any other glaring gotchas? Has anyone done this? Hmmm, I'd need the MIT krb5 stuff to build under MinGW as well... Nico -- Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake an...

The hang on exit has become quite an issue in my organization(Sun and HP hosts). I see this note in the changelog which indicates that there will not be a fix for this problem: 20001129 - (djm) Back out all the serverloop.c hacks. sshd will now hang again if there are background children with open fds. Also, I am aware of the workaround as noted in the FAQ. However this workaround is not

...inter-packet timing we completely remove the inter-keystroke timing information. regards, -Jason Coit -------- Original Message -------- Subject: Re: Defeating Timing Attacks Patch for OpenSSH 2.9.9p2 and 2.9p2 Date: Tue, 16 Oct 2001 17:36:18 -0400 From: Nicolas Williams <Nicolas.Williams at ubsw.com> To: "C. Jason Coit" <jasonc at silicondefense.com> CC: openssh-unix-dev at mindrot.org References: <3BCC889C.AA5C57F0 at silicondefense.com> Let's see. The timing attack has to do with predictable timing. The solution would seem to be to add randomness to the pack...

...r what that's worth. I just thought > I'd try to tempt some folks here into looking at doing ssh and X > integration "right". > Greg > > -- > Portland, Oregon, USA. > Please don't copy me on replies to the list. > Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake an...

so, should this go into 3.5? Index: serverloop.c =================================================================== RCS file: /home/markus/cvs/ssh/serverloop.c,v retrieving revision 1.103 diff -u -r1.103 serverloop.c --- serverloop.c 24 Jun 2002 14:33:27 -0000 1.103 +++ serverloop.c 12 Jul 2002 16:34:20 -0000 @@ -388,6 +388,11 @@ buffer_append(&stderr_buffer, buf, len); } } + /*

...roup.com/?l=openssh-unix- dev&m=101189381805982&w=2 OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com CC: openssh-unix-dev at mindrot.org This patch adds support for entries in authorized_keys which reference Kerberos principal names, GSI/X.509 certificate names when doing Kerberos or GSS authentication. Also included is support for authorized_keys entries which are patterns m...

...eaimsgroup.com/?l=openssh-unix- dev&m=100454673601558&w=2 OS/Version: All Status: NEW Severity: major Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com CC: openssh-unix-dev at mindrot.org There's a race condition in OpenSSH (all versions - haven't checked -current) such that if SIGCHLD arrives after the check for child_terminated, but before entering select() (with no timeout) AND if the session's pty/pipes have r...

...Product: Portable OpenSSH Version: 3.0.2p1 Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com We sometimes see SCP exit while leaving a hung SSH behind. SSH is left stuck in a poll()/select() waiting for the SSH connection socket to be readable. Nothing in the -v -v -v output is untoward. The server-side sshd -d -d -d output is the same whether the client hangs or not. In either case...

...Product: Portable OpenSSH Version: 3.1p1 Platform: Other OS/Version: All Status: NEW Severity: major Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com When pam_acct_mgmt() returns PAM_NEW_AUTHTOK_REQD pam_chauthtok() must be the next PAM function called. That is, pam_chauthtok() MUST be called before pam_open_session() and before pam_setcred(PAM_ESTABLISH_CRED). The point is: if the user's password is expired then the login process can...

...Product: Portable OpenSSH Version: 3.1p1 Platform: Other OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com pam_setcred() failures should not be treated as fatal; at least there should be an option so pam_setcred() failures are not treated as fatal(). But users should be warned loudly when pam_setcred(PAM_ESTABLISH_CRED) fails and sshd proceeds. Cheers, Nico ------- You are receiving this mai...

http://bugzilla.mindrot.org/show_bug.cgi?id=189 ------- Additional Comments From stevesk at pobox.com 2002-04-01 17:49 ------- why should pam_setcred() failures not be treated as fatal? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...duct: Portable OpenSSH Version: -current Platform: Other OS/Version: other Status: NEW Severity: enhancement Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: Nicolas.Williams at ubsw.com POSIX requires that signal block masks be inherited across exec() calls. As a result, any porgram that needs to use specific signal and which has no good reason to accept inheritance of blocking of such signals should explicitly unblock those signals. Furthermore, login-type programs shou...

...ailto:egarff at omniture.com] > Sent: Friday, July 12, 2002 3:00 PM > To: Williams, Nicolas > Cc: openssh-unix-dev at mindrot.org > Subject: RE: [Bug 273] sshd hangs on shell exit if user spawned child > with/bin/nohup > > > On Fri, 2002-07-12 at 12:25, Nicolas.Williams at ubsw.com wrote: > > SSH is more than a secure RSH. It truly is. You can't have it > > be two conflicting things at the same time. > > From the openssh "man ssh" page: > > "It is intended to replace rlogin and rsh, and provide secure > encrypted > commu...