similar to: [Bug 1215] sshd requires entry from getpwnam for PAM accounts

http://bugzilla.mindrot.org/show_bug.cgi?id=1215 ------- Comment #3 from vadud3 at gmail.com 2006-10-02 04:00 ------- (In reply to comment #2) > Created an attachment (id=1171) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1171&action=view) [edit] > make sshd handle when getpwnam doesn't know about the user but PAM does > > Updated patch (against 4.3p2). Leaks

http://bugzilla.mindrot.org/show_bug.cgi?id=1215 Summary: sshd requires entry from getpwnam for PAM accounts Product: Portable OpenSSH Version: 4.3p2 Platform: Other OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: PAM support AssignedTo: bitbucket at mindrot.org

http://bugzilla.mindrot.org/show_bug.cgi?id=1215 Jesse Zbikowski <embeddedlinuxguy at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |embeddedlinuxguy at gmail.com --- Comment #7 from Jesse Zbikowski <embeddedlinuxguy at

https://bugzilla.mindrot.org/show_bug.cgi?id=1215 Brad Huntting <huntting at glarp.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |huntting at glarp.com --- Comment #21 from Brad Huntting <huntting at glarp.com> --- In most environments

https://bugzilla.mindrot.org/show_bug.cgi?id=1215 Matt Joyce <matt.joyce at cloudscaling.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |matt.joyce at cloudscaling.com --- Comment #13 from Matt Joyce <matt.joyce at cloudscaling.com> ---

On Wed, 2018-01-03 at 13:50 +0530, Sudarshan Soma wrote: > HI, I do see some refernce on it: but seems not closed > https://marc.info/?l=secure-shell&m=115513863409952&w=2 > > http://bugzilla.mindrot.org/show_bug.cgi?id=1215 > > > Is this patch available in latest versions, 7.6? No. It never was. The SSSD is using NSS (Name Service Switch) [1] way of getting

Hi I am trying to write pam_radius module which talks to RADIUS server for aaa. I see sshd checks /etc/passwd for user list. Since RADIUS server has user list, can sshd ignore this check for RADIUS/TACACS+ authentication, Please suggest if there are any flags to control it. I am using the following versions. OpenSSH_6.6p1, OpenSSL 1.0.2n 7 Dec 2017 I see sssd (NAS) being used for such use

Hello! I use a PAM-module (pam_ncp_auth from ncpfs) for authentication against a netware server. pam_ncp_auth can create local UNIX user accounts from information in NDS, and it works perfect with login, gdm and telnet. But not with openssh (2.5 and 2.9). It works perfect if the user already is in /etc/passwd, but the first time he logs on he doesn't exist there. In that case openssh call

Hello, when configuring the OpenSSH to authenticate through pam_radius, I encountered the following problem: The radius server is configured to accept username and generic password, it then generates some textual string as a challenge-request and waits again for username and this time for challenge-response. Pam_radius use pam->conv function, retrieved with pam_get_item(PAM_COM), with

Sudarshan Soma wrote: > Does sssd/NSS has a way to fetch user names from sources like > RADIUS/TACACS server? My impression is that while this might be theoretically possible, nobody does this. Especially it's not clear to me how you would push group membership to the system. And AFAICS in case of TACACS+ there's also only a single "role" available (translate this to

hello. i have samba 3.0.14a installed on solaris9 os. i need to allow users login system by windows domain authorization. winbindd/pam_winbind compiled installed and working. but, one pam module (pam_dhkeys) fail all pam stack when try to obtain userinfo about windows domain users. small investigate show that getpwnam() result with windows user as parameter different from unix user. for

it's really^3 annoying that no matter the value of $HOME, that tilde_expand_filename() only looks at getpwnam() and friends instead of at least trying getenv("HOME"). What is the use case? HOME=longpath_to_config1 ssh -i ~/.ssh/key1 HOME=longpath_to_config2 ssh -i ~/.ssh/key2 but getpwnam() defeats this by always accessing what's in the passwd file. So .ssh/known_hosts is

Hi, This patch implements a minimal getpwnam() function in tftpd.c. The reason for the patch is that I needed tftpd to work in my embedded system, which are without libnss*. The patch has been tested, and works for me. Please consider it. Best regards, jules -- Jules Colding <JuBColding at yorkref.com> York Refrigeration diff -urN tftp-hpa-0.34.orig/tftpd/Makefile

My system is not only for CIFS/SMB/domain features , sometime I need to disable DC so I have to keep local user in /etc/passwd. I have download samba source code and build it. I modify the order of getpwnam call in source3/lib/username.c then solve the problem. I have checked the following list : https://lists.samba.org/archive/samba-technical/2008-March/058508.html I think this is same problem.

All Samba domain. OS FreeBSD 5.2.1 ldap set up with working replication ldap slave ldap master ldap slave 192.168.4.0-------192.168.1.0--------192.168.3.0 BDC-1 PDC BDC-2 PDC and BDC-2 are fine but on BDC-1 I get the following errors: - id(1) only return values for system password database users - machine logs indicates a problem with getpwnam():

Hi list, I've seen this error now many times (at my own setup and in the archives): sam_account_ok: Checking SMB password for user Simon Dassow [2004/03/05 12:54:19, 1] auth/auth_util.c:make_server_info_sam(821) User Simon Dassow in passdb, but getpwnam() fails! But: # id 'Simon Dassow' uid=1000(Simon Dassow) gid=513(Domain Users) groups=513(Domain Users), 512(Domain Admins)

I wonder anyone has came across this problem I have facing. Currently running 3.0.20b as member of W2K3 AD, I have a third party educational software that runs from a samba share which is available for all students. Somehow, I find that CPU is running high in % with server slowing down and winbind users not resolving properly to username from GID. I notice that a lot of these messages are

Hello List, I've been running into the following winbind problem and would really appreciate if anyone could give me a hint here: I'm currently using Samba 2.2.7a as a fileserver (domain member), user-authentication is done on a WinNT 4.0 PDC. The Samba fileserver is running winbind so all the users need not be created locally. Now I want to replace the old Samba version with Samba

Hi all I've been trying to get this sorted out for a day now, I have done the following: Followed the howto at http://samba.idealx.org/smbldap-howto.en.html Changed the reg settings in XP added the computer to ldap added administrator to ldap when I try to add the computer using the settings in XP, when prompted with username and password I use the administrator and password set

Hi list, My case : Local UNIX user : ZTEST domain : uuq.ork domain user : UUQ\ztest smb.conf for standalone samba : /home/hywu/smb.conf [/home/hywu] # cat /home/hywu/smb.conf [global] passdb backend = smbpasswd workgroup = WORKGROUP security=user Smbpasswd fail to change local UNIX user password (ZTEST) when samba role is DC. I want to change password of local UNIX user "ZTEST" but