[PATCH] for Re: OSF_SIA bug in 2.3.0p1

John P Speno speno at isc.upenn.edu
Thu Mar 29 06:18:42 EST 2001


On Wed, Mar 28, 2001 at 10:29:46AM -0600, Chris Adams wrote:
> Once upon a time, John P Speno <speno at isc.upenn.edu> said:
> > Could you test these patches on your Tru64 UNIX 4.x and 5.x systems. They
> > implement the above ideas. In short, do_login is skipped when HAVE_OSF_SIA
> > is enabled since the things do_login does are also done better in the
> > Tru64 SIA routines.
> > 
> > Also, session_setup_sia will now show /etc/motd if appropriate. I needed a place to
> > stick this, and session_setup_sia in auth-sia.c seemed ok at the time. I'm not sure of
> > that now. Consider this a first draft for changes:
> 
> It looks good, except you don't check for .hushlogin.  I pulled
> .hushlogin checking and MOTD printing into separate functions in
> session.c (to avoid code duplication).

Great. Nice work. The patches look good to me.

> There is still a problem (maybe someone else can see it): there is a
> race condition in displaying the error message back to the user when a
> session is not started.  Sometimes you get (when connecting to a locked
> account):
> 
> $ ssh -l burdell fly
> Account is disabled -- see Account Administrator.
> 
> Connection to fly closed by remote host.
> Connection to fly closed.
> $ 
> 
> and sometimes you get:
> 
> $ ssh -l burdell fly
> Connection to fly closed by remote host.
> Connection to fly closed.
> $ 

I wasn't able to duplicate that in my testing, though I was just ssh'ing to my
localhost, and maybe it's related to network delay.

Perhaps you can flush the output stream in cases where sia_ses_estab fails.

Regardless, I think these changes should be incorporated into the CVS!

Thanks.



More information about the openssh-unix-dev mailing list