4.7p1 password auth broken on SCO OSR6
Roger Cornelius
rac at tenzing.org
Tue Sep 18 00:29:50 EST 2007
On 09/15/2007 19:24, Tim Rice wrote:
> On Fri, 14 Sep 2007, Roger Cornelius wrote:
>
> RC On 09/13/2007 15:18, Roger Cornelius wrote:
> RC > On 09/10/2007 16:14, Tim Rice wrote:
> RC > > On Mon, 10 Sep 2007, Roger Cornelius wrote:
> RC > >
> RC > > > openssh 4.7p1
> RC > > > SCO OSR6
> RC > > >
> RC > > > Password authentication is non-functional. This seems dependent on
> RC > > > USE_LIBIAF which further depends on HAVE_LIBIAF (in defines.h), but
> RC > > > there is no longer any code in configure to define the latter. Building
> RC > >
> RC > > This patch will solve the missing HAVE_LIBIAF
> RC > > ------------
> RC > > --- configure.ac.old 2007-08-15 09:16:29.007892000 -0700
> RC > > +++ configure.ac 2007-09-10 15:54:26.072835157 -0700
> RC > > @@ -2004,7 +2004,10 @@
> RC > > saved_LIBS="$LIBS"
> RC > > AC_CHECK_LIB(iaf, ia_openinfo, [
> RC > > LIBS="$LIBS -liaf"
> RC > > - AC_CHECK_FUNCS(set_id, [SSHDLIBS="$SSHDLIBS -liaf"])
> RC > > + AC_CHECK_FUNCS(set_id, [SSHDLIBS="$SSHDLIBS -liaf"
> RC > > + AC_DEFINE(HAVE_LIBIAF, 1,
> RC > > + [Define if system has libiaf that supports set_id])
> RC > > + ])
> RC > > ])
> RC > > LIBS="$saved_LIBS"
> RC > >
> RC > > ------------
> RC > >
> RC > > > with HAVE_LIBIAF defined enables password authentication, but only for
> RC > > > non-long (<9 char) passwords, even though UNIXWARE_LONG_PASSWORDS seems
> RC > > > to be defined. I haven't had time yet to investigate further.
>
> I tracked down the problem. CUSTOM_SYS_AUTH_PASSWD was not defined so
> the UNIXWARE_LONG_PASSWORDS bit were never used.
>
> Please backout your changes to configure.ac (leave my patch in) and
> openbsd-compat/xcrypt.c and try this patch.
>
> Thanks.
>
> ----------------------------
> --- defines.h.old 2007-08-15 09:16:29.167892001 -0700
> +++ defines.h 2007-09-15 19:17:15.331975020 -0700
> @@ -694,9 +694,11 @@
> # define CUSTOM_SYS_AUTH_PASSWD 1
> #endif
>
> +#if defined(HAVE_LIBIAF) && defined(HAVE_SET_ID)
> +# define CUSTOM_SYS_AUTH_PASSWD 1
> +#endif
> #if defined(HAVE_LIBIAF) && defined(HAVE_SET_ID) && !defined(BROKEN_LIBIAF)
> # define USE_LIBIAF
> -# define CUSTOM_SYS_AUTH_PASSWD 1
> #endif
>
> /* HP-UX 11.11 */
> ----------------------------
Yes, that works. Thank you Tim.
--
Roger Cornelius rac at tenzing.org
More information about the openssh-unix-dev
mailing list