similar to: Patch: OpenSSH 3.8.1p1, PAM, pam_krb5 & Privilege Separation

Hello everybody! I have the following problem using version 3.7.1p1 on redhat linux 7.3 and 9. We are running a system where users home directories reside on AFS. Up to and including version 3.6.1p2 we used Simon Wilkinson's gssapi patch in conjunction with a pam_module, which executed 'aklog', a program that converts a kerberos ticket to an AFS token. This does not work anymore

Hi, I have an auth module for PAM that I wrote a few years ago called pam_vsd.so. The idea is that a user must have a certain privilege before they can successfully authenticate. Without the privilege the PAM module will return PAM_PERM_DENIED. However I find that in OpenSSH 3.7.1p2, I can easily subvert this check simply by hitting return 3 times on connection i.e. [nick at localhost

I'd like to see a feature of the commercial ssh in openssh: AllowHosts xxx.yyy.xxx.yyy *.domain.net DenyHosts xxx.yyy.xxx.* name.domain.net This allows or denies connects from certain machines (including wildcard matching). Is there any chance for this feature to be included? No, we don't want to use tcp-wrapper for this. Bye.

I am just learning to use R. The data from my current project are integer-valued. I am able to create scatterplots, but I would like to have some indication on the plots when multiple data points overlap at the same x-y coordinate. SPSS uses 'petals', and other packages use jitter. Are there similar options in R? I have not been able to find any in the documentation. Thanks very much,

Greetings, I know this has been discussed (pretty much since 3.7.1) and I have been going through the archives trying to make sense of it but I am still having problems getting 3.8.1p1 to work with PAM and AFS on Solaris 8. The problem (for those who may have missed it): When I try and log in as an AFS user to a Solaris 8 box running 3.8.1p1, I can authenticate to the machine but do not

Hi, does somebody else experience booting problems after normal installation on SD32G2 based Shuttle systems. A CentOS 5.0 installation can be performed without any problems but after the first reboot the systems are just stopping the boot process after the grub is searching for the kernel. The last line is some- thing like: [ Linux-initrd @ 0x37db8000, 0x237858 bytes]. We tried already the

Dear list, I am using the plot.coinertia function from the ade4 package. Can someone tell me if it is possible to change the label size in the upper, right plot? My RV value is so high that the arrows become shorter than the labels. Thank you for your help. Oana Tomescu -- Dipl.-Ing. Oana Tomescu ACIB Core Facility Bioinformatics Institute for Genomics and Bioinformatics, TU-Graz

Hi all, has somebody already tried to compile the rpm of the newest samba package on a 64-bit CentOS. I tried to do it with the Fedora spec file and it quit with an error, that some files are not located in the lib64 directory. These required files are located in the lib directory. Any sugesstion how this problem could be fixed in a clean way? How is this problem solved during the CentOS

Hi, > I want a shared directory to be visible only to the members of a group, and > to no one else. Instead, a shared directory is either visible to everyone I tried to realize this by using include like: #include smb.conf.%G But it did not work correctly. Sometimes the share was visible, sometimes it wasnt, and if it was visible, network path wasnt found afterwards. > I have worked

hi folks! sorry to bother you all, but the following job announcement is in german only, because fluent german is an indispensable requirement anyway. cheers jens ---- An der Universität zu Köln, prometheus - Das verteilte digitale Bildarchiv für Forschung & Lehre, Kunsthistorisches Institut, Philosophische Fakultät ist zum 01.09.2008 befristet bis 28.02.2009 die Stelle einer/eines

Hi folks! We, the prometheus image archive at the University of Cologne (Germany), would like you to take note of the following job announcement for a full-time software developer position in Cologne, Germany. In addition, we''d like to emphasize that the contract is limited in time due to formal reasons only. We definitely aim at extending it. We look forward to receiving your

As many of you know, OpenSSH 3.7.X, unlike previous versions, makes PAM authentication take place in a separate process or thread (launched from sshpam_init_ctx() in auth-pam.c). By default (if you don't define USE_POSIX_THREADS) the code "fork"s a separate process. Or if you define USE_POSIX_THREADS it will create a new thread (a second one, in addition to the primary thread). The

Hello openssh-unix-dev list members, This is related to my previous post, but I need to ask specific questions. I'm building openssh with iPhone Toolchain (http://wikee.iphwn.org/howto:toolchain_on_leopard_aspen) for iPhone 2.1 firmware. This is not an iPhone mailing list, but probably anyone with deep knowledge of openssh could give a hint. So this is what I do: 1. I patch the files using

First time poster so be kind :) I was looking at the pam_krb5.c code and noticed that for authentication to succeed getpwnam() has to succeed. Previously I had setup a web site using mod_auth_pam to authenticate against an active directory (AD) server using a pam config like: # auth auth required pam_krb5.so no_ccache no_warn # account account required

pam_krb5 work perfectly with login(1), ie. I can login and I get a TGT. With xdm however, I can still login with my kerberos pass, but I don't get the TGT :( -Richard

http://bugzilla.mindrot.org/show_bug.cgi?id=127 Summary: PAM with ssh authentication and pam_krb5 doesn't work properly Product: Portable OpenSSH Version: 3.0.2p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo:

with the following pam.conf entries, after being prompted for a login password the connection is closed: other auth sufficient /usr/lib/security/$ISA/pam_krb5.so.1 other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass the system logs the error: sshd[4215]: fatal: input_userauth_info_response_pam: no authentication context if the pam.conf entry is changed to the

http://bugzilla.mindrot.org/show_bug.cgi?id=128 Summary: PAM with ssh authentication and pam_krb5 doesn't work properly Product: Portable OpenSSH Version: 3.0.2p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo:

http://bugzilla.mindrot.org/show_bug.cgi?id=228 Summary: pam_krb5 on Solaris creates credentials with wrong owner Product: Portable OpenSSH Version: 3.1p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org

http://bugzilla.mindrot.org/show_bug.cgi?id=228 ------- Additional Comments From djm at mindrot.org 2002-04-26 21:06 ------- Solaris PAM breaks in other ways if the PAM stuff is done after the fork+setuid. CVS -current contains built-in krbV support, can you try that instead? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the