Date: Fri, 31 Jan 2003 03:08:08 -0800 (PST) From: Dag-Erling Smorgrav <des@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/crypto/openssh auth-chall.c monitor.c Message-ID: <200301311108.h0VB88r9082731@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
des 2003/01/31 03:08:08 PST
Modified files:
crypto/openssh auth-chall.c monitor.c
Log:
Fix keyboard-interactive authentication for ssh1. The problem was twofold:
- The PAM kbdint device sometimes doesn't know authentication succeeded
until you re-query it. The ssh1 kbdint code would never re-query the
device, so authentication would always fail. This patch has been
submitted to the OpenSSH developers.
- The monitor code for PAM sometimes forgot to tell the monitor that
authentication had succeeded. This caused the monitor to veto the
privsep child's decision to allow the connection.
These patches have been tested with OpenSSH clients on -STABLE, NetBSD and
Linux, and with ssh.com's ssh1 on Solaris.
Sponsored by: DARPA, NAI Labs
Revision Changes Path
1.5 +19 -0 src/crypto/openssh/auth-chall.c
1.11 +2 -0 src/crypto/openssh/monitor.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200301311108.h0VB88r9082731>