Date: Mon, 04 Nov 2002 12:11:40 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Markus Friedl <markus@openbsd.org> Cc: Alexander Leidinger <Alexander@Leidinger.net>, current@freebsd.org, openssh@openbsd.org Subject: Re: ssh-agent broken with pam_ssh for xdm (+ fix for ssh-agent.c) Message-ID: <xzp65vdzj0z.fsf@flood.ping.uio.no> In-Reply-To: <xzpadkpzjcw.fsf@flood.ping.uio.no> (Dag-Erling Smorgrav's message of "Mon, 04 Nov 2002 12:04:31 %2B0100") References: <20021103204902.3c6b3705.Alexander@Leidinger.net> <20021104092329.GA1677@folly> <xzpadkpzjcw.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Dag-Erling Smorgrav <des@ofug.org> writes: > There seems to be a bug in our pam_ssh(8). It switches to user > privileges when reading the user's keys, but switches back before > starting the agent, instead of after. Umm, wait, that was too easy. It doesn't. I got the start_agent and !start_agent cases mixed up. Alexander, could you check what UID ssh-agent runs as (ps auxw | grep agent)? What version of XFree86 do you run, and did you compile it yourself or did you install binaries? How long ago did you install it? What does 'ldd /usr/X11R6/bin/xdm' say? If it's pretty old, it might still be using Linux-PAM and an old non-credential-dropping pam_ssh(8). DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp65vdzj0z.fsf>