- (djm) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2005/08/30 22:08:05
     [gss-serv.c sshconnect2.c]
     destroy credentials if krb5_kuserok() call fails. Stops credentials being
     delegated to users who are not authorised for GSSAPIAuthentication when
     GSSAPIDeletegateCredentials=yes and another authentication mechanism
     succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
     simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
3 files changed
tree: f34f637005409c5d30b393dffe519bf7216d7f6f
  1. contrib/
  2. openbsd-compat/
  3. regress/
  4. scard/
  5. .cvsignore
  6. acconfig.h
  7. aclocal.m4
  8. acss.c
  9. acss.h
  10. atomicio.c
  11. atomicio.h
  12. audit-bsm.c
  13. audit.c
  14. audit.h
  15. auth-bsdauth.c
  16. auth-chall.c
  17. auth-krb5.c
  18. auth-options.c
  19. auth-options.h
  20. auth-pam.c
  21. auth-pam.h
  22. auth-passwd.c
  23. auth-rh-rsa.c
  24. auth-rhosts.c
  25. auth-rsa.c
  26. auth-shadow.c
  27. auth-sia.c
  28. auth-sia.h
  29. auth-skey.c
  30. auth.c
  31. auth.h
  32. auth1.c
  33. auth2-chall.c
  34. auth2-gss.c
  35. auth2-hostbased.c
  36. auth2-kbdint.c
  37. auth2-none.c
  38. auth2-passwd.c
  39. auth2-pubkey.c
  40. auth2.c
  41. authfd.c
  42. authfd.h
  43. authfile.c
  44. authfile.h
  45. bufaux.c
  46. bufaux.h
  47. buffer.c
  48. buffer.h
  49. buildpkg.sh.in
  50. canohost.c
  51. canohost.h
  52. ChangeLog
  53. channels.c
  54. channels.h
  55. cipher-3des1.c
  56. cipher-acss.c
  57. cipher-aes.c
  58. cipher-bf1.c
  59. cipher-ctr.c
  60. cipher.c
  61. cipher.h
  62. cleanup.c
  63. clientloop.c
  64. clientloop.h
  65. compat.c
  66. compat.h
  67. compress.c
  68. compress.h
  69. config.guess
  70. config.sub
  71. configure.ac
  72. crc32.c
  73. crc32.h
  74. CREDITS
  75. deattack.c
  76. deattack.h
  77. defines.h
  78. dh.c
  79. dh.h
  80. dispatch.c
  81. dispatch.h
  82. dns.c
  83. dns.h
  84. entropy.c
  85. entropy.h
  86. envpass.sh
  87. fatal.c
  88. fixpaths
  89. fixprogs
  90. getput.h
  91. groupaccess.c
  92. groupaccess.h
  93. gss-genr.c
  94. gss-serv-krb5.c
  95. gss-serv.c
  96. hostfile.c
  97. hostfile.h
  98. includes.h
  99. INSTALL
  100. install-sh
  101. kex.c
  102. kex.h
  103. kexdh.c
  104. kexdhc.c
  105. kexdhs.c
  106. kexgex.c
  107. kexgexc.c
  108. kexgexs.c
  109. key.c
  110. key.h
  111. LICENCE
  112. log.c
  113. log.h
  114. loginrec.c
  115. loginrec.h
  116. logintest.c
  117. mac.c
  118. mac.h
  119. Makefile.in
  120. match.c
  121. match.h
  122. md5crypt.c
  123. md5crypt.h
  124. mdoc2man.awk
  125. misc.c
  126. misc.h
  127. mkinstalldirs
  128. moduli
  129. moduli.c
  130. monitor.c
  131. monitor.h
  132. monitor_fdpass.c
  133. monitor_fdpass.h
  134. monitor_mm.c
  135. monitor_mm.h
  136. monitor_wrap.c
  137. monitor_wrap.h
  138. msg.c
  139. msg.h
  140. myproposal.h
  141. nchan.c
  142. nchan.ms
  143. nchan2.ms
  144. opensshd.init.in
  145. OVERVIEW
  146. packet.c
  147. packet.h
  148. pathnames.h
  149. progressmeter.c
  150. progressmeter.h
  151. readconf.c
  152. readconf.h
  153. README
  154. README.dns
  155. README.platform
  156. README.privsep
  157. README.smartcard
  158. readpass.c
  159. RFC.nroff
  160. rijndael.c
  161. rijndael.h
  162. rsa.c
  163. rsa.h
  164. scard-opensc.c
  165. scard.c
  166. scard.h
  167. scp.1
  168. scp.c
  169. servconf.c
  170. servconf.h
  171. serverloop.c
  172. serverloop.h
  173. session.c
  174. session.h
  175. sftp-client.c
  176. sftp-client.h
  177. sftp-common.c
  178. sftp-common.h
  179. sftp-glob.c
  180. sftp-server.8
  181. sftp-server.c
  182. sftp.1
  183. sftp.c
  184. sftp.h
  185. ssh-add.1
  186. ssh-add.c
  187. ssh-agent.1
  188. ssh-agent.c
  189. ssh-dss.c
  190. ssh-gss.h
  191. ssh-keygen.1
  192. ssh-keygen.c
  193. ssh-keyscan.1
  194. ssh-keyscan.c
  195. ssh-keysign.8
  196. ssh-keysign.c
  197. ssh-rand-helper.8
  198. ssh-rand-helper.c
  199. ssh-rsa.c
  200. ssh.1
  201. ssh.c
  202. ssh.h
  203. ssh1.h
  204. ssh2.h
  205. ssh_config
  206. ssh_config.5
  207. ssh_prng_cmds.in
  208. sshconnect.c
  209. sshconnect.h
  210. sshconnect1.c
  211. sshconnect2.c
  212. sshd.8
  213. sshd.c
  214. sshd_config
  215. sshd_config.5
  216. sshlogin.c
  217. sshlogin.h
  218. sshpty.c
  219. sshpty.h
  220. sshtty.c
  221. survey.sh.in
  222. TODO
  223. ttymodes.c
  224. ttymodes.h
  225. uidswap.c
  226. uidswap.h
  227. uuencode.c
  228. uuencode.h
  229. version.h
  230. WARNING.RNG
  231. xmalloc.c
  232. xmalloc.h