similar to: Bug in auth-options.c

As you know, revoking RSA/DSA keys in an SSH environment requires editing all authorized_keys and authorized_keys2 files that reference those public keys. This is, well, difficult at best but certainly very obnoxious, particularly in a large environment. SSH key management is difficult. This patch simplifies key management wherever GSS-API/Kerberos is used and is general enough to be used with

This patch (to OpenSSH 3.0.2p1) adds support for using krb4, krb5 and other principal names in authorized_keys entries. It's a sort of replacement for .klogin and .k5login, but it's much more general than .k*login as it applies to any authentication mechanism where a name is associated with the ssh client and it supports name patterns and all the normal authorized_keys entry options

These patches are against 3.0.1p1. I need them because I have a local mod which needs access to the ServerOptions struct named ``options'', hence the rename. --- auth-rsa.c.orig Mon Nov 19 16:54:01 2001 +++ auth-rsa.c Mon Nov 19 16:56:18 2001 @@ -180,8 +180,7 @@ * user really has the corresponding private key. */ while (fgets(line, sizeof(line), f)) { - char *cp; - char

This patch is against 3.0.2p1. It produces output like the first line in the example below for both v1 and v2 logins. Logging is turned on by sticking ``LogFingerprint yes'' in sshd_conf. It would be nice if something like this would make it into OpenSSH. Dec 4 14:21:09 lizzy.bugworks.com sshd[7774]: [ID 800047 auth.info] Found matching RSA1 key:

In order to comply with our internal security guidelines, we created a patch on top of openssh-3.6.1p2. With that patch, if sshd sets up a session based on key authentication, it logs to syslog which one of the keys in authorized_keys or authorized_keys2 is actually being used. The patch logs the key comment (typically the key owner's email address) as well as the name of the file containing

Hello there! I have made a patch against OpenSSH 3.0.2p1 which allows the fingerprint of the accepted key to be printed in the log message. It works with SSH1-RSA and SSH2 pubkey (DSA+RSA) authentication. This feature is controllable by the LogKeyFingerprint config option (turned off by default). Michal Kara -------------- next part -------------- diff -u5

https://bugzilla.mindrot.org/show_bug.cgi?id=1472 Summary: Authentication options not cleared in privileged process Classification: Unclassified Product: Portable OpenSSH Version: -current Platform: All URL: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug /161047 OS/Version: Linux

Attached is a patch which sets the SSH_AUTHKEY environment variable to be the remaining data at the end of an SSH key which is used for authentication. The motivation behind this is that there are time in which it's useful to know who is on the other end of the connection. For example, if I log in as root on a box, I'd like to be able to configure vi-specific settings, while another user

Hello, While trying to get a 0.8.5 rails application to run under 0.10.0, I discovered that an action called ''display'' no longer worked. (As example it''s still existant in ctionpack-1.5.0/README). After a long search, I discovered that the reason is that ActionController::Base inherits from Object, and because there is Object#display it will no longer be called as

Dear R-freaks, I am new to R and loke to write plots directly to a file with a script in batch-mode. the following error occured: # writing section > x11() Error in x11() : the x11 device has not been loaded Execution halted I do not know what to do! thanks for your help cheers steph -- Linux: the operating system with a CLUE... Command Line User Environment.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear R-Users, I cannot understand the behavior of ifelse. I have a vector blah > str(blah) List of 14 $ index.s : num 100 $ index.u : num 100 $ index.t : num 100 $ yabstand.s: num NA $ yabstand.u: num NA $ modal.s : int 8 $ modal.u : int 71 $ modal.t : int 21 > > str(blah$index.s) num 100 > everything seems OK. when

Dear R-Users, I store my data in an Postgres-table. I can connect with Rdbi.PgSQL, that is no the problem. The problem is the NA-Values. No-data-values are coded as -9999 in the table. But when I extrct them with any SELECT-statement, the -9999-values are treated as normal vectors. How can I tell R not to fetch the datasets containig -9999-values? thanks for your help stephan -- Linux: the

Dear R-users, I would like to use an environment variable inside an SELECT-statement from R to a postgres-db, but it will not work and so I need some advice from you. <code> ezg <- Sys.getenv("EZG") connect <- dbConnect.PgSQL(host="localhost", user="username", dbname="dbname") query <- dbSendQuery(connect, "SELECT ezg.s FROM ezg WHERE

Hey, am i to stupid to find the information about how to route to a controller in a module? Maybe module support has gone! The controller is under: app/controllers/admin/my_controller.rb The my_controller.rb file looks like this: module Admin class MyController def index render :text => ''Hello!'' end end end How does a route to all controllers under module

Hello list, I try to get dovecot listen only at localhost. I try listen localhost:993 and it did not work. The installation I made from http://holl.co.at/howto-email/ How it is possible that dovecot with imaps only work on localhost? Thanks for the help. Best regards Dirk

Dear guRus, I want to do some boxplots, but the median sould appear in another line-thickness and another color. I do not know, what to do in order to realise my wishes. Sorry for that question, but I am new to R. cheers steph -- Linux: the operating system with a CLUE... Command Line User Environment. -------------------------------------- Stephan Holl GnuPG Key-ID: 11946A09 ICQ#

Dear list, I am planing to set up dovecot-imapd on my production-mail server which currently only runs pop3 via qpopper on debian-sarge. It would be best, if I could only use imapd and use the existing pop3- server (qpopper) as it is. Is this possible? Can the user both use pop3 (qpopper) and imapd (dovecot) in parallel then? Where does dovecot-imapd store its mails? Does it store its mail in

Dear R-Gurus, I am preparing a multiple-plot-sheet with 2rows and 2 columns, but there are actually only 3 plots to plot. the 4. part of my sheet should contain a table with simple statistic values like n, mode, standard deviation.... I cannot handle to plot the information in the plot. the summary() function prints it to the xtrem instead of the plot. Here is an example-plot with the 3 plots

It would be great to have a HOWTO in the wiki, on how to restrict services by username in dovecot, so some users are allowed IMAP and others not allowed. As concerns restricting users by IP, I believe that is a bad idea. It's almost a useless idea, imnsho, because they can connect from another IP. It's easy to restrict services by IP using a firewall or by using inetd. -Wash

I keep reading on this list where drive C: is referred to as "~/.wine/drive_c" but on my system (due to no special smarts on my part that would be "~/.wine/dosdevices/c:" instead. Why this difference? Are the ones who post basing their operation on an older way of doing things? The ability to use "c:" rather than "drive_c" seems nicer IMNSHO. FWIW,