Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<021301c234eb$a8d6bf00$0100a8c0@wdg.uk.ibm.com>
From:	"Max Bowsher" <maxb AT ukf DOT net>
To:	<cygwin AT cygwin DOT com>
References:	<20020725170413 DOT 3469 DOT qmail AT sources DOT redhat DOT com> <005d01c23417$27a656e0$0100a8c0 AT wdg DOT uk DOT ibm DOT com> <20020726102233 DOT V3921 AT cygbert DOT vinschen DOT de>
Subject:	Re: Future ntsec-detection problem in sshd (Re: winsup/cygwin ChangeLog security.cc)
Date:	Fri, 26 Jul 2002 22:23:45 +0100
MIME-Version:	1.0
X-Priority:	3
X-MSMail-Priority:	Normal
X-MimeOLE:	Produced By Microsoft MimeOLE V6.00.2600.0000

Corinna Vinschen wrote:
> On Thu, Jul 25, 2002 at 09:09:16PM +0100, Max Bowsher wrote:
>>> CVS Log message:
>>> * security.cc (allow_ntsec): Default to on.
>>
>> A good idea, but I just want to mention a problem that will
>> eventually arise with sshd.
>>
>> It currently checks whether ntsec is enabled by examining the CYGWIN
>> environment variable. This means that if ntsec is defaulted to on,
>> without ntsec appearing in the CYGWIN env var, that code now
>> requires reworking. The location of this now-problematic code in ssh
>> is check_nt_auth in file openbsd-compat/bsd-cygwin_util.c.
>
> Thanks for the heads up.  I have to add a version check then.

Perhaps is would be better to add a 'bool is_ntsec_enabled();' function to
cygwin1.dll?

Max.



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -