Date: Mon, 4 Nov 2002 13:11:14 +0100 From: Alexander Leidinger <Alexander@Leidinger.net> To: Dag-Erling Smorgrav <des@ofug.org> Cc: markus@openbsd.org, current@freebsd.org, openssh@openbsd.org Subject: Re: ssh-agent broken with pam_ssh for xdm (+ fix for ssh-agent.c) Message-ID: <20021104131114.04e5a76f.Alexander@Leidinger.net> In-Reply-To: <xzp65vdzj0z.fsf@flood.ping.uio.no> References: <20021103204902.3c6b3705.Alexander@Leidinger.net> <20021104092329.GA1677@folly> <xzpadkpzjcw.fsf@flood.ping.uio.no> <xzp65vdzj0z.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 04 Nov 2002 12:11:40 +0100
Dag-Erling Smorgrav <des@ofug.org> wrote:
> Dag-Erling Smorgrav <des@ofug.org> writes:
> > There seems to be a bug in our pam_ssh(8). It switches to user
> > privileges when reading the user's keys, but switches back before
> > starting the agent, instead of after.
>
> Umm, wait, that was too easy. It doesn't. I got the start_agent and
> !start_agent cases mixed up. Alexander, could you check what UID
> ssh-agent runs as (ps auxw | grep agent)? What version of XFree86 do
It runs with my UID:
---snip---
(5) netchild@ttyp2 % ps auxww |grep \[s\]sh-agent
netchild 757 0.0 0.2 1976 1188 ?? Is 9:00am 0:00.01 ssh-agent
---snip---
> you run, and did you compile it yourself or did you install binaries?
Myself.
> How long ago did you install it? What does 'ldd /usr/X11R6/bin/xdm'
Oct 25.
> say? If it's pretty old, it might still be using Linux-PAM and an old
No, it uses our PAM:
---snip---
libpam.so.2 => /usr/lib/libpam.so.2 (0x281eb000)
(6) netchild@ttyp0 % ll /usr/lib/libpam.*
-r--r--r-- 1 root wheel 127K 3 Nov 20:04 /usr/lib/libpam.a
lrwxr-xr-x 1 root wheel 11B 3 Nov 20:04 /usr/lib/libpam.so@ -> libpam.so.2
-r--r--r-- 1 root wheel 25K 3 Nov 20:04 /usr/lib/libpam.so.2
---snip---
> non-credential-dropping pam_ssh(8).
Bye,
Alexander.
--
Press every key to continue.
http://www.Leidinger.net Alexander @ Leidinger.net
GPG fingerprint = C518 BC70 E67F 143F BE91 3365 79E2 9C60 B006 3FE7
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021104131114.04e5a76f.Alexander>