Date: Sun, 3 Nov 2002 20:49:02 +0100 From: Alexander Leidinger <Alexander@Leidinger.net> To: current@freebsd.org Cc: markus@openbsd.org, des@freebsd.org Subject: ssh-agent broken with pam_ssh for xdm (+ fix for ssh-agent.c) Message-ID: <20021103204902.3c6b3705.Alexander@Leidinger.net>
next in thread | raw e-mail | index | archive | help
Hi,
[Markus: this is on FreeBSD-current with
$OpenBSD: ssh-agent.c,v 1.105 2002/10/01 20:34:12 markus Exp $]
I use pam_ssh in pam.d/xdm and after an update to todays -current, it
doesn't add my key anymore. In /var/log/messages I see the following if
I try a "ssh-add -l":
---snip---
ssh-agent[6438]: error: uid mismatch: peer euid 1000 != uid 0
---snip---
ssh-agent.c:after_select() contains:
---snip---
if ((euid != 0) && (getuid() != euid)) {
error("uid mismatch: "
"peer euid %u != uid %u",
(u_int) euid, (u_int) getuid());
close(sock);
break;
}
---snip---
As ssh_agent gets startet from pam_ssh in xdm (which runs as root ->
getuid() = 0, geteuid() = 1000), it is obvious why it doesn't work.
At the moment I have this piece of code commented out, but I think this
should get changed to use geteuid() instead of getuid(). Or did I
misunderstood the idea behind the above code?
Bye,
Alexander.
--
Loose bits sink chips.
http://www.Leidinger.net Alexander @ Leidinger.net
GPG fingerprint = C518 BC70 E67F 143F BE91 3365 79E2 9C60 B006 3FE7
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021103204902.3c6b3705.Alexander>