Displaying 20 results from an estimated 2000 matches similar to: "OpenSSH and Solaris groups"
2004 Feb 20
24
[Bug 787] Minor security problem due to use of deprecated NGROUPS_MAX in uidswap.c (sshd)
http://bugzilla.mindrot.org/show_bug.cgi?id=787
------- Additional Comments From openssh_bugzilla at hockin.org 2004-02-20 13:01 -------
Created an attachment (id=548)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=548&action=view)
NGROUPS patch
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
2002 May 06
6
SCP file corruptions
Hi,
I apparently was asleep at the wheel using scp, and accidentally copied a
file onto itself. Scp generated an Input/Output error and did not perform
the copy. However, now the file is corrupt. Is this a but? Is there anyway
to fix the file I messed up?
Thanks,
Don Gathman
208.396.6675
2002 Sep 25
1
NGROUPS_MAX
Currently openssh (3.4p1) relies on the NGROUPS_MAX define. This makes
the number of allowed simultaneous (per-user) secondary groups a
compile-time decision.
$ find . -name \*.c | xargs grep NGROUPS_MAX
./groupaccess.c:static char *groups_byname[NGROUPS_MAX + 1]; /* +1 for base/primary group */
./groupaccess.c: gid_t groups_bygid[NGROUPS_MAX + 1];
./uidswap.c:static gid_t
2024 Sep 11
2
[Bug 3735] New: The ngroups variable may be set to a negative value when calling sysconf(_SC_NGROUPS_MAX)
https://bugzilla.mindrot.org/show_bug.cgi?id=3735
Bug ID: 3735
Summary: The ngroups variable may be set to a negative value
when calling sysconf(_SC_NGROUPS_MAX)
Product: Portable OpenSSH
Version: 9.8p1
Hardware: Other
OS: All
Status: NEW
Severity: normal
Priority: P5
2000 Feb 03
2
use sysconf instead of NGROUPS_MAX
Currently samba (2.0.6) relies on the NGROUPS_MAX define. This makes
the number of allowed simultaneous (per-user) secondary groups a
compile-time decision.
$ find . -name \*.c | xargs grep NGROUPS
./source/lib/system.c: if (setlen > NGROUPS_MAX) {
./source/lib/replace.c: gid_t grouplst[NGROUPS_MAX];
./source/lib/replace.c: while (i < NGROUPS_MAX &&
2002 Apr 04
1
Problems with ./config on Mac OS X
My apologies for sending this to such a generic list.
My ultimate goal is to compile Kerberos-aware ssh and scp on my Mac running
OS X 10.1.3. To that end, I downloaded openssh-3.1p1. Following the
instructions, I also downloaded and installed openssl-0.9.6c. I did a
% make; make install
for that. It seems to be happy. However, when I run ./config, I get this
error:
checking whether
2002 May 10
1
building OpenSSH-3.1p1 w/OpenSSL-0.9.6d
Has anyone tried to build 3.1p1 on Solaris with the new openssl-0.9.6d? I
am having trouble building; here is my setup: GNU ld, GNU make and my
config options are as follows:
./configure --prefix=/usr/local/stow/openssh-3.1p1 \
--sysconfdir=/usr/local/etc --with-md5-passwords --disable-suid-ssh \
--with-ssl-dir=/usr/local/ssl
Here is the error is fails on:
/usr/local/bin/ld -o scp scp.o
2004 Jan 13
3
[Bug 787] Minor security problem due to use of deprecated NGROUPS_MAX in uidswap.c (sshd)
http://bugzilla.mindrot.org/show_bug.cgi?id=787
Summary: Minor security problem due to use of deprecated
NGROUPS_MAX in uidswap.c (sshd)
Product: Portable OpenSSH
Version: 3.7.1p2
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: sshd
AssignedTo:
2012 Apr 12
2
Samba 3.6.4 on Solaris - groups for user inconsistent
Hi all,
I'm having an issue with Samba 3.6.4 on Solaris using Active Directory
with a Windows Server 2008 domain controller. I should state early on
that I do not believe this is a manifestation of the Solaris 16 group
limit - the number of groups is well below 16.
Winbind seems to be working fine - I can use wbinfo -r to check the
groups that a user is a member of, it returns the list of
2002 Feb 20
1
Is there a way to tell the sshd to ignore the security check on t he user's home permissions?
Is there a way to tell the sshd to ignore the security check on the user's
home permissions?
debug3: secure_filename: checking '/ftpdata/pxdata/pold/data/.ssh'
debug3: secure_filename: checking '/ftpdata/pxdata/pold/data'
Authentication refused: bad ownership or modes for directory
/ftpdata/pxdata/fold/data
debug1: restore_uid
debug2: userauth_pubkey: authenticated 0 pkalg
2004 Feb 20
1
NGROUPS_MAX on Linux
Linux has just raised the NGROUPS_MAX limit from 32 to 64k. In doing an
audit of various tools, openssh turned up as having incorrect groups
handling. Almost no user-space apps really care about NGROUPS_MAX.
A proposed patch (untested, since the CVS build won't compile on my RH box..
:-/) :
What think?
Index: uidswap.c
===================================================================
2002 Mar 07
2
OpenSSH-3.1p1 Solaris build with /dev/random
has anyone had a problem building 3.1p1 with Solaris 8 (2/02 release)?
That release of Solaris was the first (I believe) to incorporate their own
/dev/random which OpenSSH 3.1 doesn't seem to like too much. When I run
the configure, it reports that Random Number Source is set to use the
rand-helper. If I use the ANDIrand Solaris package as my /dev/random, It
configures properly (Random
2006 May 04
2
xmalloc(foo*bar) -> xcalloc(foo, bar) for Portable
Hi All.
While wandering in auth-pam.c I noticed that there's a few Portable-specific
escapees from the xmalloc(foo * bar) cleanup.
There's also a "probably can't happen" integer overflow in
ssh-rand-helper.c with the memset:
num_cmds = 64;
- entcmd = xmalloc(num_cmds * sizeof(entropy_cmd_t));
+ entcmd = xcalloc(num_cmds, sizeof(entropy_cmd_t));
2002 Mar 27
2
Problem with ssh-keygen
Dear Developer,
I'm having problem running ssh_keygen on my solaris 7 box. Can you
please tell me as to why I'm getting this error as described below? I
don't have that problem with solaris 8 that runs SMCossh 3.0.2p1
Thanks in advance.
Louie
# /usr/local/bin/ssh-keygen
ld.so.1: /usr/local/bin/ssh-keygen: fatal: libcrypto.so.0.9.6: open
failed: No such file or directory
Killed
#
2018 Jun 19
6
Naming clash: -DCLS=n and CLS in code
Tim Northover wrote on 06/19/2018 08:54 PM:
>>> Why are you passing that argument in the first place? The compiler
>>> completely ignores it.
>>
>> CLS stands for cacheline size. It is an important parameter
>> for optimization of the generated code, at least with gcc/g++.
>> -DCLS=n should have the same importance like for example -DNDEBUG.
>
> The
2013 May 29
3
[PATCH RFC] virtio-pci: new config layout: using memory BAR
Paolo Bonzini <pbonzini at redhat.com> writes:
> Il 28/05/2013 19:32, Michael S. Tsirkin ha scritto:
>>>> > > +
>>>> > > + switch (addr) {
>>>> > > + case offsetof(struct virtio_pci_common_cfg, device_feature_select):
>>>> > > + return proxy->device_feature_select;
>>> >
>>> >
2002 Aug 21
1
Groupmember of more than 32 Groups
Hi ,
i have the problem if somebody is member of more than 32 (Unix) groups every
group bigger than number 32 will be cut off
Debug Example :
[2002/08/21 09:57:51, 3] smbd/sec_ctx.c:set_sec_ctx(319)
32 user groups:
500 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518
519 520 521 522 523 524 525 526 527 528 529 530 531 532
[2002/08/21 09:57:51, 3]
2018 Jun 19
3
Naming clash: -DCLS=n and CLS in code
On Tue, 19 Jun 2018 at 20:46, Bruce Hoult <brucehoult at sifive.com> wrote:
> Furthermore .. in the articles you reference, the -DCLS=$(getconf LEVEL1_DCACHE_LINESIZE) is passed when compiling the user's program -- one doing extensive blocked matrix operations -- and not when building the *compiler*.
It's worse. At least in the first case, the code looks like it
wouldn't even
2001 Feb 04
4
next build
> *** openbsd-compat/bsd-nextstep.h.orig Sun Feb 4 00:16:16 2001
> --- openbsd-compat/bsd-nextstep.h Sun Feb 4 00:19:09 2001
> ***************
> *** 48,52 ****
> --- 48,56 ----
> speed_t cfgetispeed(const struct termios *t);
> int cfsetospeed(struct termios *t, int speed);
> int cfsetispeed(struct termios *t, int speed);
> +
> + /* LIMITS */
> + #define
2004 Aug 04
3
Winbind being flakey
After some more screwing around with leaving and rejoining the ADS
domain I was finally able to access a share with "valid users =" set to
a domain group I was a member of. The _only_ change I made after this
was to add yet another group to the valid users on the share and restart
samba...after that I could no longer access the share. I removed the
additional group, restarted samba and