[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#171642: marked as done (ssh: include opie support or fix ssh to use pam_opie for enabled privsep)



Your message dated Tue, 24 Aug 2004 08:57:02 -0400
with message-id <20040824125702.GE5172@mathom.us>
and subject line pam_opie bugs
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 4 Dec 2002 00:12:59 +0000
>From martin@independence.wuertele.net Tue Dec 03 18:12:58 2002
Return-path: <martin@independence.wuertele.net>
Received: from 212186005166.11.vie.surfer.at (wuertele.net) [212.186.5.166] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 18JN9t-0007Su-00; Tue, 03 Dec 2002 18:12:58 -0600
Received: by wuertele.net (Postfix, from userid 1000)
	id 4A9DB60015F; Wed,  4 Dec 2002 01:12:52 +0100 (CET)
Date: Wed, 4 Dec 2002 01:12:52 +0100
From: Martin Wuertele <maxx@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: ssh: include opie support or fix ssh to use pam_opie for enabled privsep
Message-ID: <20021204001252.GA11249@independence.wuertele.net>
Reply-To: Martin Wuertele <maxx@debian.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="rwEMma7ioTxnRzrJ"
Content-Disposition: inline
User-Agent: Mutt/1.4i
X-Reportbug-Version: 2.9
X-Editor: Vi Improved <http://www.vim.org/>
X-GPG: 1024D/3E8DCCC0 30DC 1D28 1D79 32F5 5E67  3ABB 28EE B35A 3E8D CCC0
X-Accept-Language: de, en, it
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-6.8 required=5.0
	tests=PGP_SIGNATURE_2,SPAM_PHRASE_00_01,USER_AGENT,
	      USER_AGENT_MUTT,X_ACCEPT_LANG
	version=2.41
X-Spam-Level: 


--rwEMma7ioTxnRzrJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: ssh
Version: 1:3.5p1-2
Severity: wishlist

Since UsePrivilegeSeparation was introduced authentification via
pam_opie only works with=20

UsePrivilegeSeparation no=20

decreasing security while ssh itself still has no direct opie support

Please either make ssh work with pam_opie while UsePrivilegeSeparation
is enabled or include opie support into ssh (patch against 3.0 at
http://marc.theaimsgroup.com/?l=3Dopenssh-unix-dev&m=3D100483915419537&w=3D=
2)

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux independence 2.4.18-xfs-lvm1.1rc1 #1 Wed Jul 3 09:37:04 CEST =
2002 i686
Locale: LANG=3DC, LC_CTYPE=3Dde_AT@EURO

Versions of packages ssh depends on:
ii  adduser                     3.47         Add and remove users and groups
ii  debconf                     1.1.25       Debian configuration managemen=
t sy
ii  libc6                       2.3.1-5      GNU C Library: Shared librarie=
s an
ii  libpam-modules              0.72-35      Pluggable Authentication Modul=
es f
ii  libpam0g                    0.76-8       Pluggable Authentication Modul=
es l
ii  libssl0.9.6                 0.9.6g-2     SSL shared libraries
ii  libwrap0                    7.6-ipv6.1-2 Wietse Venema's TCP wrappers l=
ibra
ii  zlib1g                      1:1.1.4-3    compression library - runtime

-- debconf information:
* ssh/ssh2_keys_merged:=20
  ssh/new_config: true
  ssh/rootlogin_warning:=20
  ssh/insecure_rshd:=20
* ssh/privsep_tell:=20
* ssh/forward_warning:=20
  ssh/ancient_version:=20
  ssh/protocol2_only: true
* ssh/protocol2_default:=20
* ssh/insecure_telnetd:=20
* ssh/run_sshd: true
  ssh/encrypted_host_key_but_no_keygen:=20
* ssh/use_old_init_script: true
* ssh/upgrade_to_openssh: true
* ssh/SUID_client: true
  ssh/privsep_ask: true

TIA Martin
--=20
<maxx@debian.org> --------------------------------- NO HTML MAILS PLEASE
           GPG / PGP encrypted and signed messages preferred

--rwEMma7ioTxnRzrJ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE97UiEKO6zWj6NzMARAuaUAJ9lT4mDqMyfeuGZNq9Dw+DdVuASAgCePonz
OUFK8YoorvGQhx+rcw+tU2U=
=+iRH
-----END PGP SIGNATURE-----

--rwEMma7ioTxnRzrJ--

---------------------------------------
Received: (at 171642-close) by bugs.debian.org; 24 Aug 2004 12:57:04 +0000
>From mstone@mathom.us Tue Aug 24 05:57:04 2004
Return-path: <mstone@mathom.us>
Received: from out007pub.verizon.net (out007.verizon.net) [206.46.170.107] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1BzarI-00031J-00; Tue, 24 Aug 2004 05:57:04 -0700
Received: from osgiliath.mathom.us ([138.88.166.245]) by out007.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20040824125703.UBCC1210.out007.verizon.net@osgiliath.mathom.us>;
          Tue, 24 Aug 2004 07:57:03 -0500
Received: from localhost (localhost [127.0.0.1])
	by osgiliath.mathom.us (Postfix) with ESMTP id 7C936604BC2;
	Tue, 24 Aug 2004 08:57:02 -0400 (EDT)
Received: from osgiliath.mathom.us ([127.0.0.1])
	by localhost (osgiliath [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id 24429-01-4; Tue, 24 Aug 2004 08:57:02 -0400 (EDT)
Received: by osgiliath.mathom.us (Postfix, from userid 1000)
	id 621CD604BB8; Tue, 24 Aug 2004 08:57:02 -0400 (EDT)
Date: Tue, 24 Aug 2004 08:57:02 -0400
From: Michael Stone <mstone@debian.org>
To: 151084-close@bugs.debian.org, 150939-close@bugs.debian.org,
	171642-close@bugs.debian.org
Subject: pam_opie bugs
Message-ID: <20040824125702.GE5172@mathom.us>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
X-Pgp-Fingerprint: 53 FF 38 00 E7 DD 0A 9C  84 52 84 C5 EE DF 7C 88
User-Agent: Mutt/1.5.6+20040803i
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at mathom.us
X-Authentication-Info: Submitted using SMTP AUTH at out007.verizon.net from [138.88.166.245] at Tue, 24 Aug 2004 07:57:02 -0500
Delivered-To: 171642-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no 
	version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level: 
X-CrossAssassin-Score: 3

libpam-opie is currently working with full functionality in sarge ssh.

Mike Stone



Reply to: