Skip to Content.
Sympa Menu

sm-grimoire - [SM-Grimoire]Re: [SM-Sorcery]openssh User Error

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Nick Jennings <nkj AT namodn.com>
  • To: Ryan Abrams <rabrams AT sourcemage.org>
  • Cc: sm-sorcery AT lists.ibiblio.org, sm-grimoire AT lists.ibiblio.org
  • Subject: [SM-Grimoire]Re: [SM-Sorcery]openssh User Error
  • Date: Thu, 7 Nov 2002 11:40:53 -0800

Hi Ryan,

Looks like someones been messing with my code (accusing stare in dufflebunks
general direction)


create_account() {
...

ACCOUNT_UID=`get_uid_for_account $1`
PRIMARY_GID=`get_primary_gid_for_account $1`
# PRIMARY_GNAME=`get_group_name $PRIMARY_GID` umm... isn't this
roundabout?
PRIMARY_GNAME=$1

...
}


Notice (In the commented piece of code) I am getting the group name of the
GID, not the group name of the spell. This is because the group name is not
always going to be the same as the user name.

Using group name 'sshd' is not going to work, I need the GID first, and
then get the group name of that GID (which in this case is 'nobody' instead
of 'sshd').

Fixed in CVS. (removed comment on the line of code in question).

On Thu, Nov 07, 2002 at 07:20:54AM -0600, Ryan Abrams wrote:
> Hey all,
>
> Just cast openssh after installing from ISO beta1. I believe it was
> intended to create the user seperation user ssh and put it in the sshd
> group.
>
> The problem is that groupadd and useradd dont work. Here are the first
> 3 lines from my compile log for it:
>
> ----
> Using gcc version: 3.2
> groupadd: gid 65534 is not unique
> useradd: unknown group sshd
> ----
>
> It then goes on to build successfully.
>
> However, at the end when it configures, it fails to load sshd with the
> error:
>
> ----
> /usr/sbin/sshd -t -f /etc/ssh/sshd_config
> Privilege separation user sshd does not exist
> make: [check-config] Error 255 (ignored)
> ----
>
> I am betting that either: a) the spell is configured to require the
> priv sep user/group, but doesnt use the sorcery function to set those
> up. or b) the spell uses the sorcery functions, and sorcery is broken.
>
> Either way, this needs to be fixed before we go 1.0.
>
> I have filed this bug as #1592 here:
> http://bugs.sourcemage.org/show_bug.cgi?id=1592
>
> In the meantime I will add the user and group myself. But the spell
> should really do this automatically.
>
> -Ryan
>
> _______________________________________________
> SM-Sorcery mailing list
> SM-Sorcery AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-sorcery
>




Archive powered by MHonArc 2.6.24.

Top of Page