From owner-freebsd-current  Fri Feb 25  8: 8: 1 2000
Delivered-To: freebsd-current@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP
	id 77EB937B884; Fri, 25 Feb 2000 08:07:56 -0800 (PST)
	(envelope-from ache@nagual.pp.ru)
Received: (from ache@localhost)
	by nagual.pp.ru (8.9.3/8.9.3) id TAA59409;
	Fri, 25 Feb 2000 19:07:55 +0300 (MSK)
	(envelope-from ache)
Date: Fri, 25 Feb 2000 19:07:54 +0300
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: markm@freebsd.org
Cc: current@freebsd.org
Subject: OpenSSH bugs with login.conf
Message-ID: <20000225190754.A59343@nagual.pp.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0.1i
Organization: Biomechanoid
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

How to reproduce bug:
with default /etc/login.conf try to log in using standard login (1) and
"ssh localhost" (2). Then "echo $FTP_PASSIVE_MODE". You'll have  "YES" in
case (1) and "Undefined variable." in case (2). User's ~/.login_conf not
handled too.

Please use corresponding security/ssh/patches/patch-af to fix the problem
Searching for HAVE_LOGIN_CAP_H in whole sources (not in patches only) will
help (sshd.c and userfile.c are affected). Patched standard ssh1 from
ports deal with login.conf in correct way.

-- 
Andrey A. Chernov
<ache@nagual.pp.ru>
http://nagual.pp.ru/~ache/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message