lsh-bugs

lsh-bugs@lists.lysator.liu.se

492 discussions

Re: GSS support?
by Simon Josefsson 01 Jul '03

01 Jul '03

(Responding to the list since this seems like a interesting issue.) nisse(a)lysator.liu.se (Niels Möller) writes: >> Oops, I didn't think of this. OK, it seems fairly clear that GSS >> should be invoked from a different process, which communicate with the >> lsh core using some protocol, then. Still, since kerberos 5 GSS >> mechanism is fast, this is probably not a show-stopper. I think I'll >> leave this as an exercise. > > As long as the servers contacted are *not* of the user's/client's > choice, it may be ok. For the Kerberos 5 GSS mechanism, the server doesn't talk to the network, at least my K5 implementation doesn't. But in general, there is no such guarantee, and GSS_Accept_sec_context is even specifically allowed to block: This call may block pending network interactions for those mech_types in which a directory service or other network entity must be consulted on behalf of a context acceptor in order to validate a received input_token. > Is there any chance of an non-blocking variant of the gss-api? Generally speaking, that is up to the IETF. Searching for "block" in the RFCs suggest people haven't thought about this. Which is symptomatic of many things in GSS; I'll add this problem to my Criticism of GSS section. It may be possible to support a new extension flag to request only non-blocking mechanisms, but existing GSS libraries wouldn't support it. I'll think about adding this for my GSS library. > It's often painful to write proper select-loop based programs, > because various libraries one want to use are blocking. Most common > example is gethostbyname, select-loop based programs have to either > not use DNS, or fork a separate process for DNS lookups, or use some > non-blocking resolver library, like adns. It would be nice with some > adns-like interface to gss-api or directly to kerberos, but I'm not > aware of any work in that direction. Neither am I. It sounds like it would be possible to implement this in a wrapper library though, a'la handle = START(gss_accept_sec_context(...)) gss_call_started = now() do select loop if FINISHED(handle) maj_stat = FINISH(handle) continue GSS operation... if gss_call_started < now() - 10000 ABORT(handle) send gss error... The START function would start the operation in another process, FINISHED would check if the function call has finished, and FINISH would clean up the operation and return the function value, and ABORT would cleanup the operation without caring about the return value. There could be some tricky issues -- e.g., what if you call ABORT and the process later do return something useful, then the GSS state is probably in an undefined state from the application's point of view -- but it doesn't look infeasible. It could perhaps even be implemted as a meta-gss library, similar to adns. Hm. OTOH, I recall you mentioned LSH might support a separated process style authentication in the future anyway, so then the GSS calls can be moved to that second process. This would probably be simpler. It would also simplify binary packaging -- only the second process need to be different for GSS, the core lshd is the same. Regards, Simon

1 0

Bom dia lsh-bugs
by Marta 29 Jun '03

29 Jun '03

1 0

ANNOUCE: lsh-1.5.2
by nisse＠lysator.liu.se 13 Jun '03

13 Jun '03

News for the 1.5.2 release Encrypted private keys works again. New client escape sequence RET ~ ?, which lists all available escape sequences. Also fixed the werror functions so that they use \r\n to terminate lines when writing to a tty in raw mode. Implemented handling of multiple --interface options to lshd. As a side effect, The -p option must now be given before --interface to have any effect. Connecting to machines with multiple IP-adresses is smarter, it connects to a few addresses at a time, in parallel. Fixed a file descriptor leak in the server tcpip forwarding code. Lots of portability fixes. This versions has been compiled, and has passed the testsuite, on a reasonable set of different systems, including: AIX-4.3 FreeBSD-4.8 on x86 Linux on alpha,sparc, and x86 SunOS-5.8 on sparc and x86 There is a vague plan to review the upgrading instructions and other documentation, and then make a new "stable" release which would be either 1.6 or 2.0. Available at http://www.lysator.liu.se/~nisse/archive/lsh-1.5.2.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-1.5.2.tar.gz Regards, /Niels

1 0

I NEED YOUR
by irena.kovac＠caramail.com 12 Jun '03

12 Jun '03

Sir, My name is Mrs.Irena Kovac and i need your assistance.I am the widow of Miodrag Kovac, former Yugoslav Minister of Health. My husband died on April 12 2002. After his death the government seized our properties and froze our accounts and try to kill us so we move to Ghana where we are be sicking refugee,things have been so bad.But i recently discovered that my husband deposited about US$26 million dollars, in a safe place outside my country. I am unable to claim these funds myself because of travel restrictions which have been placed on me.I need your assistance to claim this funds and secure them so that i take my family away from the oppression that we now face.In return for your assistance i am willing to give you portion of the money,I am open for reasonable negotiation on this.I will give details and proof after i hear from you.Please keep this confidential as the future of my family depends on this.I hope to hear from you soon and you also your telephone/fax number. MRS.IRENA KOVAC

1 0

PRIVATE
by KEN BASONGA 07 Jun '03

07 Jun '03

Good Day, With warm heart I offer my friendship, and my greetings, and I hope this letter meets you in good time. It will be surprising to you to receive this proposal from me since you do not know me personally. However, I am sincerely seeking your confidence in this transaction, which I propose with my free mind and as a person of integrity. My name is Mr.Ken Basonga, the first son of Bila Basonga,one of the most popular black farmer from Zimbabwe, murdered in the land dispute in my country. As led by my instinct, I decided to contact you through email, after searching for contacts via the international business correspodence, as it is the only means I can contact anybody since I am cutting off ties with Zimbabwe for security and safety reasons. However,I apologize if this is not acceptable to you. The purpose of this letter is to seek your most needed assistance in a business venture. Due to the the land and political problems in Zimbabwe, as a result of President Robert Mugabe's introduction of new Land Act Reform wholly affecting the rich white farmers and the few rich black farmers, and his desire to hold on to power for life, my father forsaw the danger that came in Zimbabwe. Before he was murdered, he withdrew all of our business foreign accounts in dollars and sold up our shares in major companies. We then went to Johannesburg, South Africa to deposit the sum of US$14.5 million (Fourteen million, Five Hundred thousand US dollars), in a private security company. This money was deposited with this Private Security company for safety and security reasons, and was to be used for the purchase of land, new machines and chemicals establishment of new farms in Botswana and Swaziland. President Mugabe's support for the violent imbabwean war veterans and some lunatics in the society, led to the murder of my beloved father and other innocent lives. I was continually threatened to abandon my inheritance from my father after he was murdered. I resited for a while, but when the danger became unbearable, and I survived two murder attempts, I fled Zimbabwe to South Africa where I was arrested and detained for eight(8 good month)in jail.I fled South Africa for The Netherlands with the help of the present prison command chief officer in Charge(P.C.C.O) I am currently staying in the Netherlands where I am seeking political asylum. In fact my decision to come here to seek asylum, is because the security company from South Africa, has a branch here, and they have moved the deposit from their office in Johannesburg here. I need to transfer this money to an account and invest part of the money. Since the law of Netherlands prohibits a refugee (asylum seeker) to open any bank account or to be involved in any financial transaction, this is why I am seeking a genuine and reliable partner, whose account this money can be transferred, hence this proposal to you.You have to understand that this decision taken by me entrusts my future and in your hands, as a result of the safe keeping of this money. If you accept to assist me, all I want you to do for me, is to assist with arrangements to claim the deposit from the security company from their office here in The Netherlands, as it has now been transfered from Johannesburg, South Africa to their branch here. The company will be legally informed of you representing me. For your assistance, I have two options for you. Firstly you can choose to have 10% of the money for your assistance, and helping me open an account for the money to be deposited here, or you can go into partnership with me for the proper profitable investment of the money in your country. Whichever the option you want, please to notify me in your reply. I have also set aside 1%($145,000,00) of this money for all kinds of expenses that come our way in the process of this transaction, and 4% ($580,000,00) for Charity donation. If you prefer to accept the 10% for assisting with opening an account, then 85%will be left in the account here for me. Please, I want you to maintain the absolute secrecy for the purpose of this transaction.I look forward to your reply and co-operation, and I thank you in advance as I anticipate your co-operation. Thanks and God bless. Sincerely, Ken Basonga

1 0

investment initiative
by esther robert 16 May '03

16 May '03

From: Miss Esther Guie Ave.Placard 5 Abidjan,Cote d�ivoire Attn:Sir, Am Miss Esther Guie a 19 yrs old undergraduate student of Harare university in Zimbabwe and also the first daughter to late Mr. Robert Etien Guie the black farmer who was murdered along with his wife and two children in the march 2002 farm riot in which many people lost their lives and many fleed due to their support to the white Farmers in the obnoxious land reform programme of president Robert Mugabe of zimbabwe. Through the help of the opposition leader Mr. Morgan Tsavgauri we fleed to cote D�ivoire where our late mother hails from and are presently leaving with our grand Mother.Due to our present situation since our arrival here our grand mother decided to disclose to us the lodgment our late father kept with a security company in Benin Republic To enable us get through with our education and other aspects of life.Rightnow,am looking for an honest person who will claim this money out on our behalf and then subsequently manage (invest) this money properly for us and also help us secure a good school and accomodation in his/her domain.the whole documents for the lodgment are with my grand mother hence any body agrees to assist in this project this document will be transferred to him/her to make the contact on our behalf. Please we shall appreciate any body who comes up to this help for God will reward him/her. Waiting to hear from u soon Miss Esther Guie

1 0

RAYMOND ABUKA
by Mr Raymond Abuka 14 May '03

14 May '03

Dear Friend, You may be surprised to receive this letter from me since you do not know me personally. The purpose of my introduction is that I am Mr Raymond Abuka,the first son of Zuma Abuka, one of the most popular black farmer in Zimbabwe who was recently murdered in the land dispute in my country. I got your contact through network online hence decided to write you. Before the death of my father, he had taken me to Johannesburg to deposit the sum of USD$14.5 million (Fourteen million, Five Hundred thousand United States dollars), in one of the private security company, as he foresaw the looming danger in Zimbabwe this money was deposited in a box as gem stones to avoid much demurrage from security company. This amount was meant for the purchase of new machines and chemicals for the Farms and establishment of new farms in swaziland. This land problem came when Zimbabwean President Mr. Robert Mugabe introduced a new Land Act Reform wholly affecting the rich white farmers and some few black farmers, and this resulted to the killing and mob action by Zimbabwean war veterans and some lunatics in the society. In fact a lot of people were killed because of this Land reform Act for which my father was one of the victims. It is against this background that, I and my family fled Zimbabwe for fear of our lives and are currently staying in the Netherlands where we are seeking political asylum and moreso have decided to transfer my father's money to a more reliable foreign account. since the law of Netherlands prohibits a refugee (asylum seeker) to open any bank account or to be involved in any financial transaction throughout the territorial zone of Netherlands, As the eldest son of my father, I am saddled with the responsibility of seeking a genuine foreign account where this money could be transferred without the knowledge of my government who are bent on taking everything we have got. The South African government seems to be playing along with them. I am faced with the dilemma of moving this amount of money out of South Africa for fear of going through the same experience in future, both countries have similar political history. As a businessman,I am seeking for a partner who I have to entrust my future and that of my family in his hands, I must let you know that this transaction is risk free. If you accept to assist me and my family, all I want you to do for me, is to make an arrangements with the security company to clear the consignment(funds) from their affiliate office here in the Netherlands as i have already given directives for the consignment to be brought to the Netherlands from South Africa.But before then all modalities will have to be put in place like change of ownership to the consignment and more importantly this money I intend to use for investment. I have two options for you. Firstly you can choose to have certain percentage of the money for nominating your account for this transaction. Or you can go into partnership with me for the proper profitable investment of the money in your country. Whichever the option you want, feel free to notify me. I have also mapped out 5% of this money for all kinds of expenses incurred in the process of this transaction.If you do not prefer a partnership I am willing to give you 20% of the money while the remaining 75% will be for my investment in your country. Contact me with the above E-mail address, while I implore you to maintain the absolute secrecy required in this transaction. Thanks, GOD BLESS Yours Faithfully, Mr. Raymond Abuka,

1 0

Bugtracking for LSH
by nisse＠lysator.liu.se 13 May '03

13 May '03

An "LSH" project now exists in Lysator's bugzilla installation, at http://bugzilla.lysator.liu.se/index.cgi. Bugs reported via the bugzilla system have a smaller probability of being forgotten. Regards, /Niels

1 0

Proble loging in as non root !
by Manfred Gruber 23 Apr '03

23 Apr '03

Hi List ! I want to use lsh 1.4.2 on a distribution which I build myself. I have a problem login in as non root. Connecting to sftp-server or lshd as root works fine.Apr 18 14:43:55 192 lshd[370]: lshd: do_exec_shell: fixing up name of shell... I send you a part of the log: Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: argv0 = '-sh'. Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -u Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -g Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -i Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: Argument list: Apr 18 14:43:55 192 lshd[370]: lshd: 'lsh-execuv' Apr 18 14:43:55 192 lshd[370]: lshd: '-u' Apr 18 14:43:55 192 lshd[370]: lshd: '502' Apr 18 14:43:55 192 lshd[370]: lshd: '-g' Apr 18 14:43:55 192 lshd[370]: lshd: '100' Apr 18 14:43:55 192 lshd[370]: lshd: '-n' Apr 18 14:43:55 192 lshd[370]: lshd: 'ftpuser' Apr 18 14:43:55 192 lshd[370]: lshd: '-i' Apr 18 14:43:55 192 lshd[370]: lshd: '--' Apr 18 14:43:55 192 lshd[370]: lshd: '/bin/sh' Apr 18 14:43:55 192 lshd[370]: lshd: '-sh' Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: before exec i think the problem is here: Apr 18 14:43:55 192 lshd[370]: lshd: unix_user: exec failed (errno = 2): No such file or directory Apr 18 14:43:55 192 lshd[369]: lshd: lsh_oop_signal_callback: Signal 17, handler: reaper_callback Apr 18 14:43:55 192 lshd[369]: lshd: Child 370 died with exit code 1. Apr 18 14:43:55 192 lshd[369]: lshd: unix_process: do_logout_notice Apr 18 14:43:55 192 lshd[369]: lshd: unix_process.c: do_utmp_cleanup (HAVE_UTMPX_H) Apr 18 14:43:55 192 lshd[369]: lshd: server_session.c: do_exit_shell Apr 18 14:43:55 192 lshd[369]: lshd: server_session.c: Sending exit-status message on channel 0 Apr 18 14:43:55 192 lshd[369]: lshd: DEBUG: Sent CHANNEL_REQUEST lshd: (size 25 = 0x19) Apr 18 14:43:55 192 lshd[369]: 00000000: 62000000000000000b657869742d7374 b........exit-st 00000010: 617475730000000001 atus..... Apr 18 14:43:55 192 lshd[369]: lshd: write_buffer: do_write length = 56 Which file wants lshd to open there, maybe I have set the wrong permission to this special file. Thanx for help, regards -- mfg Manfred Gruber ==========================================

3 3

Fwd:Uncover The TRUTH
by connie farley 20 Apr '03

20 Apr '03

1 0

← Newer
1
...
43
44
45
46
47
48
49
50
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

lsh-bugs