Re: [Cooker] sshd slapd bite each other

2003-01-29 Thread Guillaume Cottenceau
Pixel [EMAIL PROTECTED] writes: 4) On the package selection screen, after toggling to flat mode and hitting the Floppy button I noticed a few things. First the screen is a mess. It looks like the header part of the window is too short, there's some image in the top left that looks

Re: [Cooker] sshd slapd bite each other

2003-01-29 Thread Adam Williamson
On Wed, 2003-01-29 at 04:53, David Walser wrote: 2) License Agreement, Refuse is selected by default o_O i don't think this will change, sorry :-/ Ok, I just thought it was weird. It'll probably throw a lot of people off, but whatever. My guess is this may be a sort-of legal

Re: [Cooker] sshd slapd bite each other

2003-01-29 Thread Buchan Milne
Adam Williamson wrote: On Wed, 2003-01-29 at 04:53, David Walser wrote: My guess is this may be a sort-of legal thing...I've seen other programs do it, and my guess is some lawyer somewhere in the shadowy world of software licensing decided it'd make a difference if the user had to make

Re: [Cooker] sshd slapd bite each other

2003-01-29 Thread Pixel
David Walser [EMAIL PROTECTED] writes: 1) Font face in the active part of the installation program is pretty inconsistent. It's spotty and very faded in spots. ? Is it possible to do screenshots if the install doesn't finish? Something onto a floppy maybe? for screenshots, 2

Re: [Cooker] sshd slapd bite each other

2003-01-28 Thread Brian Smith
On Mon, 27 Jan 2003 15:08:20 -0800 (PST) David Walser [EMAIL PROTECTED] wrote: Strange, how does one reproduce the problem exactly? I have a user that's only in LDAP and I can ssh to them just fine. On my system, setting 'ssl on' or 'ssl start_tls' in /etc/ldap.conf causes ssh (or sshd) to

Re: [Cooker] sshd slapd bite each other

2003-01-28 Thread David Walser
--- Brian Smith [EMAIL PROTECTED] wrote: On Mon, 27 Jan 2003 15:08:20 -0800 (PST) David Walser [EMAIL PROTECTED] wrote: Strange, how does one reproduce the problem exactly? I have a user that's only in LDAP and I can ssh to them just fine. On my system, setting 'ssl on' or 'ssl

Re: [Cooker] sshd slapd bite each other

2003-01-28 Thread Buchan Milne
David Walser wrote: --- Brian Smith [EMAIL PROTECTED] wrote: On Mon, 27 Jan 2003 15:08:20 -0800 (PST) David Walser [EMAIL PROTECTED] wrote: Strange, how does one reproduce the problem exactly? I have a user that's only in LDAP and I can ssh to them just fine. On my system, setting 'ssl

Re: [Cooker] sshd slapd bite each other

2003-01-28 Thread Pixel
David Walser [EMAIL PROTECTED] writes: [...] i didn't receive this mail, thanks David to gave a link to the archive... otherwise i wouldn't have belive it really was posted :-( 1) Font face in the active part of the installation program is pretty inconsistent. It's spotty and very faded in

Re: [Cooker] sshd slapd bite each other

2003-01-28 Thread David Walser
--- Pixel [EMAIL PROTECTED] wrote: David Walser [EMAIL PROTECTED] writes: [...] i didn't receive this mail, thanks David to gave a link to the archive... otherwise i wouldn't have belive it really was posted :-( 1) Font face in the active part of the installation program is pretty

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread Brian Smith
On Fri, 24 Jan 2003 22:06:42 -0700 Vincent Danen [EMAIL PROTECTED] wrote: When you have ssl start_tls do the usual getent passwd or getent shadow and such work? getent passwd works, getent shadow does not (well, it lists the used in /etc/shadow, but not the ones in ldap).

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread Brian Smith
On Mon, 27 Jan 2003 10:50:28 -0500 Brian Smith [EMAIL PROTECTED] wrote: On Fri, 24 Jan 2003 22:06:42 -0700 Vincent Danen [EMAIL PROTECTED] wrote: When you have ssl start_tls do the usual getent passwd or getent shadow and such work? getent passwd works, getent shadow does not (well, it

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread Vincent Danen
On Mon Jan 27, 2003 at 11:02:49AM -0500, Brian Smith wrote: When you have ssl start_tls do the usual getent passwd or getent shadow and such work? getent passwd works, getent shadow does not (well, it lists the used in /etc/shadow, but not the ones in ldap). Err, that's incorrect. I

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread Vincent Danen
On Mon Jan 27, 2003 at 12:53:00PM -0700, Vincent Danen wrote: [...] Let me do some digging... this is starting to ring some bells. I bet if you do an strace on ssh (as a user in the LDAP database), you'll see it accessing /etc/shadow directly, and *not* using getent to retrieve that

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread David Walser
--- Vincent Danen [EMAIL PROTECTED] wrote: On Mon Jan 27, 2003 at 11:40:11AM -0700, Vincent Danen wrote: [...] Let me do some digging... this is starting to ring some bells. I bet if you do an strace on ssh (as a user in the LDAP database), you'll see it accessing /etc/shadow

Re: [Cooker] sshd slapd bite each other

2003-01-27 Thread Vincent Danen
On Mon Jan 27, 2003 at 03:08:20PM -0800, David Walser wrote: [...] Ok... if you do an strace on ssh, and then search the output, you'll see something like this: open(/etc/passwd, O_RDONLY) = 3 ... (much repeated, my strace shows 6 similar calls) So ssh, the client, is looking

Re: [Cooker] sshd slapd bite each other

2003-01-24 Thread Buchan Milne
Stefan van der Eijk wrote: Weird. The machine bgmilne, is it set to query it's own ldap database? Yes, but it was giving referrals, which might have influenced it, but: [bgmilne@bgmilne bgmilne]$ grep ^host /etc/ldap.conf host localhost And on our ldap master (runs 9.0): [bgmilne@hercules

Re: [Cooker] sshd slapd bite each other

2003-01-24 Thread Brian Smith
Hey guys, I had ssh start crapping out on me recently, but I was able to fix it by changing ssl start_tls to ssl on. With start_tls, ssh segfaults if run by a user who's not in /etc/passwd, and sshd segfaults if you try to login as a user not in /etc/passwd. Other problems I've seen with ldap

Re: [Cooker] sshd slapd bite each other

2003-01-24 Thread Vincent Danen
On Fri Jan 24, 2003 at 09:05:57PM -0600, Brian Smith wrote: Hey guys, I had ssh start crapping out on me recently, but I was able to fix it by changing ssl start_tls to ssl on. With start_tls, ssh segfaults if run by a user who's not in /etc/passwd, and sshd segfaults if you try to login

[Cooker] sshd slapd bite each other

2003-01-23 Thread Stefan van der Eijk
Another nice LDAP related buglet. On a cooker machine that's running slapd (openldap-servers) the sshd won't work properly. It's easy to reproduce (I've done it on 2 machines): [root@taz root]# service ldap start ldaps Starting slapd (ldap + ldaps): [ OK ]

Re: [Cooker] sshd slapd bite each other

2003-01-23 Thread Buchan Milne
On Thu, 23 Jan 2003, Stefan van der Eijk wrote: Another nice LDAP related buglet. On a cooker machine that's running slapd (openldap-servers) the sshd won't work properly. It's easy to reproduce (I've done it on 2 machines): [root@taz root]# service ldap start ldaps Starting slapd (ldap +

Re: [Cooker] sshd slapd bite each other

2003-01-23 Thread Stefan van der Eijk
Another nice LDAP related buglet. On a cooker machine that's running slapd (openldap-servers) the sshd won't work properly. It's easy to reproduce (I've done it on 2 machines): [root@taz root]# service ldap start ldaps Starting slapd (ldap + ldaps): [ OK ]