similar to: AFS/kerberos build problems

Hi I was finally able to build openssh with afs support using the kth-kerberos libraries. I cannot get the token passing to work. I think I am missing something fundamental in setting this up but I can't seem to find any documentation. I would geatly appreciate any advice offered. _________________________________________________________________ Gedaliah Wolosh, Ph.D. 973 596-5437 New

Dear Developers First of all I would love to thank you for a nice tool I had been using rsync within backuppc project to backup my remote hosts. It had been working fine until the moment (as I think) whenever I moved RAID to another box and now the source directory (/raid/research) is now actually NFS mounted. Now backup (rsync process) stalls and sleeps indefinitely On the backup server:

Hello, I'm running into problems while trying to build libvorbis. My build platform is Solaris 10 (sparc) (11/06) with GCC 3.4.6. The build fails with the following error : Making all in examples gmake[2]: Entering directory `/afs/cad.njit.edu/u/a/n/andym/ftp/freeware/multimedia/ogg/libvorbis-1.2.0/examples' gcc -DHAVE_CONFIG_H -I. -I.. -I../include

Dear Rsyncers, I'm trying to maintain a mirror of Ubuntu distribution and I had a cron job which rsynced it every night. The problem came after last reboot a few days ago -- destination directory wasn't mounted, thus wasn't accessible by rsync for writing: rsync: failed to set times on "/share/ubumirror/.": Operation not permitted (1) rsync: recv_generator: mkdir

After cvsupping, when I built world, it errored out with an error 134. I mv /usr/src /usr/src.old and cvsupped again... tried a buildworld, still an error 134 I "make kernel" and all went well After rebooting, I made world .. all went well I cp'd my custom kernel source to /usr/src/sys/i386/conf and made kernel ALL went well... I rebooted, did a mke world from /usr/src and all went

As posted, here is an updated patch which allows openssh to be built with non-selinux config. (Hi openssh guys, forwarding this to you incase you interested including it into the devel version of openssh. Please let us know if you have any suggestions or changes that need to be made) Regards Nigel Kukard On Thu, Sep 02, 2004 at 04:11:54PM -0400, Daniel J Walsh wrote: > New SSH patch. >

Would OpenSSH be willing to accept a modification similar to the one below to replace the kafs modification to get an AFS PAG and token? The nice features of this are that it can be compiled in even if OpenAFS is not available. At runtime if the dynamic library is present, it can be loaded and called. A dynamic lib is used so the setpag is in the same process. It has been reported that the

This privsepifies OSF/1 SIA, but I'm still being told the same error occurs. I'm stumped. Without an OSF/1 box near me I can't do too much more help unless someone can either tell me what is wrong or show me why SIA is failing in their logs. (And tell me if it's different w/ or w/out this patch) - Ben Index: auth-sia.c

It still is not right, but thanks to Steve we have gotten this far.. The issue seems to be here: debug3: entering: type 26 debug3: entering debug1: session_new: init debug1: session_new: session 0 debug3: entering: type 26 : sendmsg(12): Invalid argument debug1: Calling cleanup 0x1200365c0(0x14000d9d8) debug1: session_pty_cleanup: session 0 release /dev/ttyp4 debug1: Calling cleanup

Ok.. I need wider testing for this. I'm getting reports back it works mostly. 'ssh site ls' fails, but they can login with Privsep enbled. Can I get those who are using Tru64 or OSF/1 that have SIA enabled to test? This should apple to either -cvs or the current snapshot (I would perfer not to use 3.4p1 due to bugs). I'm going on a trip next week and will be around very spotty

Hi, This diff (for portable) makes the chrooted preauth privsep process log via the monitor using a shared socketpair. It removes the need for /dev/log inside /var/empty and makes mandatory sandboxing of the privsep child easier down the road (no more socket() syscall required). Please test. -d Index: log.c =================================================================== RCS file:

Hi All. Attached is a patch that implements password expiry with PAM and privsep. It works by passing a descriptor to the tty to the monitor, which sets up a child with that tty as stdin/stdout/stderr, then runs chauthtok(). No setuid helpers. I used some parts of Michael Steffens' patch (bugid #423) to make it work on HP-UX. It's still rough but it works. Tested on Solaris 8 and

Either this never made it to the list or no one cares about Tru64. This is the last time I'll send this patch to the list. If no one steps up and finishes it or provides me with enough information to fix any remaining bugs (one being complaint that 'ssh site cmd' does not work right). If there is no activity on this for a week. I'll post it to bugzilla and will ignore any

The following patch (relative to -current) makes PAM a proper kbd-interactive citizen. There are a few limitations (grep for todo), but the code seems to work OK for protocols 1 & 2 with and without privsep. Please have a play! auth2-pam.c is based on code from FreeBSD. Index: auth2-chall.c =================================================================== RCS file:

-- | Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's | http://www.mindrot.org / distributed filesystem'' - Dan Geer ---------- Forwarded message ---------- Date: Tue, 6 Mar 2001 22:28:52 +0100 (MET) From: "[iso-8859-2] Martin MOKREJ?" <mmokrejs at natur.cuni.cz> To: openssh at openssh.com Subject: Re: Problem compiling

- I'm not really sure if this is a bug in openssh or in Kth's krb4-1.1. Anyway, if you define --with-afs=/usr/athena[1] and --with-kerberos4=/usr/athena on Solaris 2.7, you need to apply this minor patch to get the client to build. - You could argue that kafs.h should include these sys files since it uses macros inside them. - Booker C. Bense [1]- Where kth installs by default. diff

Hi all, This is a patch against 4.2p1 (compiling for a Linux --- an old, highly customized 7.2 to be specific). When I compiled it from your original source, installed it, and turned on PAM (for passwd aging), I couldn't get the passwd expiration warnings as specified in /etc/shadow to work at all (the message that is supposed to warn you as you're logging in that your passwd will expire

Below is a new PAM kbd-int diff based on FreeBSD's code. This code makes PAM kbd-int work with privilege separation. Contrary to what I have previously stated - it *does* handle multiple prompts. What it does not handle is multiple passes through the PAM conversation function, which would be required for expired password changing. I would really appreciate some additional eyes over the

Hello All. Attached is an update to my previous patch to make do_pam_chauthtok and privsep play nicely together. First, a question: does anybody care about these or the password expiration patches? Anyway, the "PRIVSEP(do_pam_hauthtok())" has been moved to just after the pty has been allocated but before it's made the controlling tty. This allows the child running chauthtok to

The latest snapshot (20020324) fails to compile here. Linux 2.4.18-rc1 Alpha The first messages are: monitor_wrap.c: In function `mm_request_receive': monitor_wrap.c:91: warning: int format, different type arg (arg 3) monitor_wrap.c:100: warning: int format, different type arg (arg 3) which have to do with fatal() calls and int not being the same as ssize_t... But the next one is the