Testing of recent commits

Damien Miller djm at mindrot.org
Tue Nov 18 22:46:01 EST 2003


There have been a few recent commits to portable OpenSSH that require
testing. It would be appreciated if you could grab the 20031118 (or
later) snapshot and give it a try on your platforms of choice. 

Ideally, "giving it a try" means running the regress tests, in addition
to casual (non-production) use and reporting your experiences back to
the list. The more platforms and compile-time options, the better.

Please note that the new snapshots replace the experimental "gssapi"
authentication method with an improved "gssapi-with-mic" method. The new
method (which does *not* interoperate with the deprecated "gssapi"
method) provides proper validation of the session ID between the client
and the server.

Some of the highlights (more in the ChangeLog):

 - (dtucker) [auth-pam.c] Convert chauthtok_conv into a generic 
   tty_conv, and use it for do_pam_session.  Fixes problems like
   pam_motd not displaying anything.  ok djm@

 - jakob at cvs.openbsd.org 2003/11/12 16:39:58
   [dns.c dns.h readconf.c ssh_config.5 sshconnect.c]
   update SSHFP validation. ok markus@

 - markus at cvs.openbsd.org 2003/11/17 11:06:07
   [auth2-gss.c gss-genr.c gss-serv.c monitor.c monitor.h]
   [monitor_wrap.c monitor_wrap.h sshconnect2.c ssh-gss.h]
   replace "gssapi" with "gssapi-with-mic"; from Simon Wilkinson; 
   test + ok jakob.

 - (djm) Bug #632: Don't call pam_end indirectly from within kbd-int
   conversation function

 - (djm) Export environment variables from authentication subprocess to 
   parent. Part of Bug #717


-d




More information about the openssh-unix-dev mailing list