From owner-cvs-all  Fri Jan 31  3: 8: 9 2003
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id AF48337B401; Fri, 31 Jan 2003 03:08:08 -0800 (PST)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 67F0643E4A; Fri, 31 Jan 2003 03:08:08 -0800 (PST)
	(envelope-from des@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h0VB88bv082732;
	Fri, 31 Jan 2003 03:08:08 -0800 (PST)
	(envelope-from des@repoman.freebsd.org)
Received: (from des@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h0VB88r9082731;
	Fri, 31 Jan 2003 03:08:08 -0800 (PST)
Message-Id: <200301311108.h0VB88r9082731@repoman.freebsd.org>
From: Dag-Erling Smorgrav <des@FreeBSD.org>
Date: Fri, 31 Jan 2003 03:08:08 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/crypto/openssh auth-chall.c monitor.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

des         2003/01/31 03:08:08 PST

  Modified files:
    crypto/openssh       auth-chall.c monitor.c 
  Log:
  Fix keyboard-interactive authentication for ssh1.  The problem was twofold:
  
   - The PAM kbdint device sometimes doesn't know authentication succeeded
     until you re-query it.  The ssh1 kbdint code would never re-query the
     device, so authentication would always fail.  This patch has been
     submitted to the OpenSSH developers.
  
   - The monitor code for PAM sometimes forgot to tell the monitor that
     authentication had succeeded.  This caused the monitor to veto the
     privsep child's decision to allow the connection.
  
  These patches have been tested with OpenSSH clients on -STABLE, NetBSD and
  Linux, and with ssh.com's ssh1 on Solaris.
  
  Sponsored by:   DARPA, NAI Labs
  
  Revision  Changes    Path
  1.5       +19 -0     src/crypto/openssh/auth-chall.c
  1.11      +2 -0      src/crypto/openssh/monitor.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message