similar to: NeXT 3.3 vs openssh-2.5.1p1 (Couldn't restore privileges)

Hi # lslpp -l perl.rte Fileset Level State Description ---------------------------------------------------------------------------- Path: /usr/lib/objrepos perl.rte 5.8.0.0 COMMITTED Perl Version 5 Runtime Environment # lppchk -vm3 # perl -V Summary of my perl5 (revision 5.0 version 8 subversion

Seteuid now creates user token using S4U. We don't create a token from scratch anymore, so we don't need the "Create a process token" privilege. The service can run under SYSTEM again. --- contrib/cygwin/ssh-host-config | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/contrib/cygwin/ssh-host-config b/contrib/cygwin/ssh-host-config index

-- | Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's | http://www.mindrot.org / distributed filesystem'' - Dan Geer ---------- Forwarded message ---------- Date: Thu, 8 Mar 2001 09:39:19 +0100 (MET) From: Martijn de Munnik <M.H.M.deMunnik at phys.uu.nl> To: openssh at openssh.com Subject: OpenSSH 2.5.1p1 won't compile on Solaris

Can a Solaris person take a look at this? -- | Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's | http://www.mindrot.org / distributed filesystem'' - Dan Geer ---------- Forwarded message ---------- Date: Wed, 28 Feb 2001 12:33:48 +0200 From: owner-ssh at clinet.fi To: ssh at clinet.fi Subject: make 2.5.1p1 on Solaris8 Trying to build

I've installed today the openssh-2.5.1p1 from RPMS and I cannot use it with protocol 2. It gives: OpenSSH_2.5.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090600f debug: Reading configuration data /etc/ssh/ssh_config debug: Applying options for * debug: ssh_connect: getuid 500 geteuid 0 anon 0 debug: Connecting to int [10.1.1.1] port 22. debug: Seeding random number generator debug: Allocated local

Comments from the rest of the Solaris group? - Ben ---------- Forwarded message ---------- Date: Tue, 20 Feb 2001 11:20:33 +0100 From: Volker Paulsen <paulsen at orbiteam.de> To: mouring at etoh.eviladmin.org Subject: Linker flags in 2.5.1p1... While I'm compiling 2.5.1p1, I've got the following remarks: Host: sparc-sun-solaris2.7 Compiler: cc Compiler

I figured this out -- looks like 2.5.1p1 is now using ports < 1024 on the client side (wasn't before?). I had a ipchains rule to allow ACK packets to 1024:65535, which was good enough for <= 2.3.0p1 : #allow only ACK tcp packed ipchains -A input -j ACCEPT -i eth0 -s any/0 --dport 1024:65535 -p tcp ! -y So I added the following : #allow return from ssh connections ipchains -A input -j

Hey Everyone: "No seteuid method available" is the error I get when trying to configure Samba 2.2.2 on an HP-UX 11.0 system. This system is part of a test network and has tcp/ip but no DNS. There are only 3 articles on the Samba site about this and the only fix requires changing and recompiling "C" libraries. Is there another, simpler fix? Thanks. ~ Gary Zawilinski ~

Hello friends, I have a script that uses the sftp client to transfer a file to another server using PK authentication. It was working until I upgraded from OpenSSH 2.5.1p1 to 2.5.2p2-1 yesterday (on a RH Linux 6.2 system). The sftp command is: sftp -o "IdentityFile ~/.ssh/id_dsa" \ $PUSERNAME@$PSERVER >$TEMPFILE 2>&1 <<-! cd $PDIR put $DOC_ARCHIVE ls quit !

We recently upgraded from an older version of SSH to OpenSSH 2.5.1p1 (OpenSSH_2.5.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090600f) and are having problems on just a few hosts in our environment. The other 200 systems are working fine. Every once in a blue-moon it will connect with version 2. When I try to connect to or from one of these hosts using SSH2 I get the following error (I have sshd -d

I've compiled 2.5.1p1 on HP-UX mdv010 B.11.00 A 9000/887 457369232 two-user license with --prefix=/usr --sysconfdir=/etc/ssh \ --with-ssl-dir=$MYPWD/openssl-0.9.6 \ --with-pid-dir=/etc/ssh \ --with-default-path=/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin --with-entropy-timeout=250 Nothin special I think, works fine with 2.3.0p1. Well, when I try to stop a process

Hi, I built rpm from openssh-2.5.1p1 srpm on redhat 6.2, then installed it. When trying to ssh from other machine, sshd gives error: ..... Feb 20 17:54:24 foo PAM_pwdb[925]: (login) session opened for user doe by LOGIN(uid=0) Feb 20 17:55:15 foo sshd[1342]: Connection closed by 192.168.0.3 Feb 20 17:55:43 foo sshd[1343]: PAM unable to dlopen(/lib/security/pam_stack.so) Feb 20 17:55:43 foo

I updated my Solaris 8 machines from openssh-2.3.0p1 to 2.5.1p1 yesterday and it fixed the cron/audit issue but now root logins are no longer permitted. I updated it to 2.5.1p2 this morning and that is still the case: golfer:/[207]# ssh -v tsunami OpenSSH_2.5.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090600f debug: Reading configuration data /var/ssh/ssh_config debug: Applying options for *

Hi ! I got a problem with connection of users at a connection to smbd. It seems that the authentication is ok and the user accepted and existing. And for test I just connect to the homes. I get the following log error. lib/sec_.c:assert_gid(70) Failed to set gid priviliges to (-1,100) now set to (0,0) uid (0,0) lib/util.c:smb_panic(2456) PANIC: failed to set gid Does anybody know what that

Any way to check if another proc has run or been run by a proc that is setuid or seteuid?

Why does dovecot mount the user home directory whenever the user checks his email (either pop or imap)? Is there a way to disable this? I have indicated in the default_mail_env = mbox:/home/%u/:INBOX=/mail/%u:INDEX=MEMORY. The users are in ldap. Windows users' home is in /home/%u so this is ok but unix users' home are in their local computers and are mounted (via automount) at

The RHL 6.2 command "/etc/rc.d/init.d/crond start" prevents clean logout from compiled version of OpenSSH-2.5.1p1 on all hosts. The command "/etc/rc.d/init.d/crond stop" is OK. This occurs for interactive or command line requests. ssh remotehost /etc/rc.d/init.d/crond stop --- works every time ssh remotehost /etc/rc.d/init.d/crond start --- hangs every time Control-C will

OpenSSH 2.5.1p1 was compiled on two different Linux machines, both with glibc 2.2, libz-1.1.3 and openssl-0.9.6. Both had been running 2.3.0p1 successfully. On both, the new sshd failed: # ./sshd -d -d -d -D debug1: sshd version OpenSSH_2.5.1p1 debug1: load_private_key_autodetect: type 0 RSA1 Disabling protocol version 2. Could not load host key RSA sessions worked. Generating a new DSA

Hi! I've built openssh-2.5.1p1 on an AIX 4.3.3 box, and attempted to use the public/private key authentication mechanism. This appears to work for a non-root user locally, but not for the root user. I have generated the identity (key) files and copied the .pub files to the authorized_keys files in /.ssh It appears that when I allow password authentication (the default) I can log in after

I just compiled OpenSSH-2.5.1p1 from source on my Debian potato box using: --prefix=/usr/local/openssh --enable-gnome-askpass --with-tcp-wrappers --with-ipv4-default --with-ipaddr-display --libexecdir=/usr/local/openssh/lib --disable-suid-ssh --with-pam I am running OpenSSL-0.9.5a compiled from source with: --prefix=/usr/local/openssl --openssldir=/usr/local/openssl I can scp into my other