OpenSSH_4.3p1 configure patch

Darren Tucker dtucker at zip.com.au
Tue Feb 7 22:52:19 EST 2006


On Tue, Feb 07, 2006 at 12:32:33PM +0100, Corinna Vinschen wrote:
> I found it.  If privilege separation is activated, monitor_child_preauth
> calls auth_log.  If privilege separation is not used, userauth_finish
> calls auth_log.  On systems lacking working descriptor passing, both
> functions are called when privilege separation is on.  The only useful
> way I found to get rid of one of the messages is not to print the
> message from monitor_child_preauth, if DISABLE_FD_PASSING is set for
> the target.  Patch below.  If somebody finds a way without adding another
> #ifdef, I'd be very glad, though.

I've been looking at this too.  It looks like I had a similar problem
when doing the audit support and came up with an even uglier solution
(look for SSH_AUDIT_EVENTS in auth.c).  There has to be a nicer way
for all concerned.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list