- (djm) OpenBSD CVS Sync
   - djm@cvs.openbsd.org 2005/08/30 22:08:05
     [gss-serv.c sshconnect2.c]
     destroy credentials if krb5_kuserok() call fails. Stops credentials being
     delegated to users who are not authorised for GSSAPIAuthentication when
     GSSAPIDeletegateCredentials=yes and another authentication mechanism
     succeeds; bz#1073 reported by paul.moore AT centrify.com, fix by
     simon AT sxw.org.uk, tested todd@ biorn@ jakob@; ok deraadt@
3 files changed
tree: f34f637005409c5d30b393dffe519bf7216d7f6f
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. README
  9. README.dns
  10. README.platform
  11. README.privsep
  12. README.smartcard
  13. RFC.nroff
  14. TODO
  15. WARNING.RNG
  16. acconfig.h
  17. aclocal.m4
  18. acss.c
  19. acss.h
  20. atomicio.c
  21. atomicio.h
  22. audit-bsm.c
  23. audit.c
  24. audit.h
  25. auth-bsdauth.c
  26. auth-chall.c
  27. auth-krb5.c
  28. auth-options.c
  29. auth-options.h
  30. auth-pam.c
  31. auth-pam.h
  32. auth-passwd.c
  33. auth-rh-rsa.c
  34. auth-rhosts.c
  35. auth-rsa.c
  36. auth-shadow.c
  37. auth-sia.c
  38. auth-sia.h
  39. auth-skey.c
  40. auth.c
  41. auth.h
  42. auth1.c
  43. auth2-chall.c
  44. auth2-gss.c
  45. auth2-hostbased.c
  46. auth2-kbdint.c
  47. auth2-none.c
  48. auth2-passwd.c
  49. auth2-pubkey.c
  50. auth2.c
  51. authfd.c
  52. authfd.h
  53. authfile.c
  54. authfile.h
  55. bufaux.c
  56. bufaux.h
  57. buffer.c
  58. buffer.h
  59. buildpkg.sh.in
  60. canohost.c
  61. canohost.h
  62. channels.c
  63. channels.h
  64. cipher-3des1.c
  65. cipher-acss.c
  66. cipher-aes.c
  67. cipher-bf1.c
  68. cipher-ctr.c
  69. cipher.c
  70. cipher.h
  71. cleanup.c
  72. clientloop.c
  73. clientloop.h
  74. compat.c
  75. compat.h
  76. compress.c
  77. compress.h
  78. config.guess
  79. config.sub
  80. configure.ac
  81. contrib/
  82. crc32.c
  83. crc32.h
  84. deattack.c
  85. deattack.h
  86. defines.h
  87. dh.c
  88. dh.h
  89. dispatch.c
  90. dispatch.h
  91. dns.c
  92. dns.h
  93. entropy.c
  94. entropy.h
  95. envpass.sh
  96. fatal.c
  97. fixpaths
  98. fixprogs
  99. getput.h
  100. groupaccess.c
  101. groupaccess.h
  102. gss-genr.c
  103. gss-serv-krb5.c
  104. gss-serv.c
  105. hostfile.c
  106. hostfile.h
  107. includes.h
  108. install-sh
  109. kex.c
  110. kex.h
  111. kexdh.c
  112. kexdhc.c
  113. kexdhs.c
  114. kexgex.c
  115. kexgexc.c
  116. kexgexs.c
  117. key.c
  118. key.h
  119. log.c
  120. log.h
  121. loginrec.c
  122. loginrec.h
  123. logintest.c
  124. mac.c
  125. mac.h
  126. match.c
  127. match.h
  128. md5crypt.c
  129. md5crypt.h
  130. mdoc2man.awk
  131. misc.c
  132. misc.h
  133. mkinstalldirs
  134. moduli
  135. moduli.c
  136. monitor.c
  137. monitor.h
  138. monitor_fdpass.c
  139. monitor_fdpass.h
  140. monitor_mm.c
  141. monitor_mm.h
  142. monitor_wrap.c
  143. monitor_wrap.h
  144. msg.c
  145. msg.h
  146. myproposal.h
  147. nchan.c
  148. nchan.ms
  149. nchan2.ms
  150. openbsd-compat/
  151. opensshd.init.in
  152. packet.c
  153. packet.h
  154. pathnames.h
  155. progressmeter.c
  156. progressmeter.h
  157. readconf.c
  158. readconf.h
  159. readpass.c
  160. regress/
  161. rijndael.c
  162. rijndael.h
  163. rsa.c
  164. rsa.h
  165. scard-opensc.c
  166. scard.c
  167. scard.h
  168. scard/
  169. scp.1
  170. scp.c
  171. servconf.c
  172. servconf.h
  173. serverloop.c
  174. serverloop.h
  175. session.c
  176. session.h
  177. sftp-client.c
  178. sftp-client.h
  179. sftp-common.c
  180. sftp-common.h
  181. sftp-glob.c
  182. sftp-server.8
  183. sftp-server.c
  184. sftp.1
  185. sftp.c
  186. sftp.h
  187. ssh-add.1
  188. ssh-add.c
  189. ssh-agent.1
  190. ssh-agent.c
  191. ssh-dss.c
  192. ssh-gss.h
  193. ssh-keygen.1
  194. ssh-keygen.c
  195. ssh-keyscan.1
  196. ssh-keyscan.c
  197. ssh-keysign.8
  198. ssh-keysign.c
  199. ssh-rand-helper.8
  200. ssh-rand-helper.c
  201. ssh-rsa.c
  202. ssh.1
  203. ssh.c
  204. ssh.h
  205. ssh1.h
  206. ssh2.h
  207. ssh_config
  208. ssh_config.5
  209. ssh_prng_cmds.in
  210. sshconnect.c
  211. sshconnect.h
  212. sshconnect1.c
  213. sshconnect2.c
  214. sshd.8
  215. sshd.c
  216. sshd_config
  217. sshd_config.5
  218. sshlogin.c
  219. sshlogin.h
  220. sshpty.c
  221. sshpty.h
  222. sshtty.c
  223. survey.sh.in
  224. ttymodes.c
  225. ttymodes.h
  226. uidswap.c
  227. uidswap.h
  228. uuencode.c
  229. uuencode.h
  230. version.h
  231. xmalloc.c
  232. xmalloc.h