similar to: sshd/winbind wrong GID redux

http://bugzilla.mindrot.org/show_bug.cgi?id=559 Summary: PAM fixes Product: Portable OpenSSH Version: 3.6.1p2 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P3 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: fcusack at fcusack.com - start PAM

Hello, I've noticed that ssh always opens /etc/passwd on my Linux box before parsing command line options, and so the file is opened even if the user is afterward presented with the usage and the program ends. So, this snippet in OpenSSH-4.2p1, ssh.c: 219 /* Get user data. */ pw = getpwuid(original_real_uid); if (!pw) { logit("You don't exist, go away!"); exit(1);

Hi, getpwuid is called as seen in the patch, and is then called again indirectly by tilde_expand_filename without first copying off the results from the first call. This is fatal on MacOSX (and it would seem it should be fatal elsewhere, too). Please CC me in replies; I'm not a subscriber. --- openssh-4.4p1/ssh.c 2006-09-01 22:32:40.000000000 -0700 +++ openssh-4.4p1-fix/ssh.c

On 08/17/2018 10:16 AM, Richard W.M. Jones wrote: > Commit bd1c5c9f4dcf38458099db8a0bf4659a07ef055d changed all the code > to use Jansson instead of yajl. However it didn't change the OCaml > API name (which was still Yajl). > Are you aware that Jansson can't parse all JSON generated by qemu, and that the developers of Jansson did not seem sympathetic to patches that would

http://bugzilla.mindrot.org/show_bug.cgi?id=702 Summary: dont call userauth_finish after auth2_challenge_stop Product: Portable OpenSSH Version: 3.7.1p1 Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: major Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org

Since we use APIs added in Jansson 2.7 (e.g. json_string_length), then raise the minimum version required to that version. Fixes commit bd1c5c9f4dcf38458099db8a0bf4659a07ef055d. --- docs/guestfs-building.pod | 2 +- m4/guestfs-libraries.m4 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/guestfs-building.pod b/docs/guestfs-building.pod index bf80984e4..db429f1a9

Folks, During testing, we found a couple of issues with openssh3.0.2p1: 1. In userauth_finish() in auth2.c (as well as in do_authloop in auth1.c), the foll. check: if (authctxt->failures++ > AUTH_FAIL_MAX) is never satisfied and thus packet_disconnect() never gets called. I suspect the code just drops out of the dispatch_run function list instead. This should be an == instead of >.

https://bugzilla.mindrot.org/show_bug.cgi?id=1377 Summary: getpwuid called twice without pwcopy (percent_expand: NULL replacement) Classification: Unclassified Product: Portable OpenSSH Version: 4.4p1 Platform: ix86 OS/Version: Mac OS X Status: NEW Severity: major Priority: P2

Historically the view has been if you want NFS-like filesystem over SSH write a dedicated subsystem.? The OpenSSH project stopped following the sftp spec when it tried to "be-everyting-to-everyone" protocol instead of a clean and simple ftp/scp replacement.? As filesystem sharing protocols have oddies between platforms that add a lot of complexity and are unsuited for the original

I?m a PhD student at the University of Warsaw, and have started using R. In many books they specify to use <- instead of = when assigning values, and this is also mentioned in older posts on the R website. However, it seams to me that some update has occured, becuase I continously get the same result wether I use <- or =. I would be extremely helpful for any answer to this. = seams more

On 08/17/2018 10:48 AM, Richard W.M. Jones wrote: > On Fri, Aug 17, 2018 at 10:30:35AM -0500, Eric Blake wrote: >> On 08/17/2018 10:16 AM, Richard W.M. Jones wrote: >>> Commit bd1c5c9f4dcf38458099db8a0bf4659a07ef055d changed all the code >>> to use Jansson instead of yajl. However it didn't change the OCaml >>> API name (which was still Yajl). >>>

Trying to install asterisk 13 on CentOS 6. The ./configure tells me: configure: error: *** JSON support not found (this typically means the libjansson development package is missing) I don't really need JSON so I thought I would just disable it. ./configure --with-jansson=no does not work ./configure --without-jansson does not work How do I use a configure switch to disable it? Thanks,

I am attempting to update to 7.4 using the DVD I get these errors(truncated list) Error: Package: libgpod-0.8.3-14.el7.x86_64 (@epel) Requires: libusbmuxd.so.2()(64bit) Removing: usbmuxd-1.0.8-11.el7.x86_64 (@anaconda) libusbmuxd.so.2()(64bit) Obsoleted By: usbmuxd-1.1.0-1.el7.x86_64 (c7-media) Not found Error: Package:

I am trying to compile Samba 4.9.1, on Ubuntu 18.04.1 server. However, when I try to configure, it says that jansson is not found. I have installed libjansson-dev from the repo (version 2.11-1), but still get the error. Config.log says: Checking for jansson /bin/sh: 1: --cflags: not found not found ​

https://bugzilla.mindrot.org/show_bug.cgi?id=983 --- Comment #51 from Petr Lautrbach <plautrba at redhat.com> 2012-03-28 02:35:54 EST --- Created attachment 2138 --> https://bugzilla.mindrot.org/attachment.cgi?id=2138 fixes of original patch (In reply to comment #46) > Created attachment 2096 [details] > Updated version of original patch. Fix missing braces around block in

On Thu, Nov 23, 2017 at 02:23:52PM +0100, Pino Toscano wrote: >While YAJL mostly works fine, it did not see any active development in >the latest 3 years. OTOH, Jansson is another JSON C implementation, >with a very liberal license, and a much nicer API. > >Hence, switch all of libguestfs from YAJL to Jansson: >- configure checks, and buildsystem in general >- packages pulled

I've implemented a patch to openssh which allows the PAM auth layer to detect if the PAM stack has changed the user name and then adjusts its internal data structures accordingly. (imagine a PAM stack that uses individual credentials to authenticate, but assigns the user to a role account). First, is the openssh community interested in this patch? Second, if there is interest in the patch,

On Wed, Aug 08, 2018 at 10:06:12 +0100, Daniel Berrange wrote: > On Wed, Aug 08, 2018 at 10:58:50AM +0200, Holger Schranz wrote: > > > checking for JANSSON... no > > This is the problem. In 4.6.0 we just switched to using JANSSOn instead > of yajl for JSON parsing. Your host doesn't have the development headers > installed for jansson.... > > > >

Hi, recently, there was a discussion in the development list of libvirt on switching to a different JSON library than YAJL [1]. Since we use YAJL, and the points there IMHO apply to libguestfs as well, I decided to give a try in switching to Jansson [2]. The result IMHO is nice, with the additional APIs of Jansson that simplify some of our code. Unlike with YAJL, I did not set a minimum

https://bugzilla.mindrot.org/show_bug.cgi?id=983 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1930 --- Comment #34 from Damien Miller <djm at mindrot.org> 2011-09-06 10:34:24 EST --- Retarget unresolved