cosign-discuss  

Re: [Cosign-discuss] login failure with krb5 instance separator '/'

Chris Hecker
Mon, 06 Feb 2012 15:07:09 -0800

> Leftovers from make test. They won't be in the final release
> tarball.

Cool, thanks.  I'll remove them locally.

The instance separator fix seems to work well, thanks!

By the way, here's a super simple patch I use on monster.c to avoid
printing a zillion 0/0/0 0/0 lines in the log all night long when there
are no users:


=== modified file 'daemon/monster.c'
--- daemon/monster.c    2012-02-06 20:17:28 +0000
+++ daemon/monster.c    2012-02-06 20:24:28 +0000
@@ -110,7 +110,7 @@
     char               *cosign_host = NULL;
     char               *cosign_conf = _COSIGN_CONF;
     char               *p, *q;
-    int                 facility = _COSIGN_LOG, level = LOG_INFO;
+    int                 facility = _COSIGN_LOG, level = LOG_INFO,
stats_level = LOG_NOTICE;
     int                        fg = 0;
     SSL_CTX            *m_ctx = NULL;
     extern int          optind;
@@ -463,7 +463,11 @@
        }

     }
-    syslog( LOG_NOTICE, "STATS MONSTER: %d/%d/%d login %d/%d service",
+    stats_level = LOG_NOTICE;
+    if(!login_gone && !login_sent && !login_total && !service_gone &&
!service_total) {
+      stats_level = LOG_DEBUG;
+    }
+    syslog( stats_level, "STATS MONSTER: %d/%d/%d login %d/%d service",
            login_gone, login_sent, login_total, service_gone,
service_total );
        } /* end forever loop */
 }



Chris



On 2012/02/06 13:23, Andrew Mortensen wrote:
> 
> On Feb 6, 2012, at 4:14 PM, Chris Hecker wrote:
> 
>>
>> There's a bunch of new directories/files in the rc2 tgz, are those going
>> to be included going forward, or are they just in this RC?
>>
>> unknown:
>>  CA/
>>  bin/
>>  certs/
>>  cosign/
>>  openssl.cnf
>>  tests/ 
>>  tmp/
> 
> Leftovers from make test. They won't be in the final release tarball.
> 
>>  cgi/factors/
> 
> This is part of the 3.2.0 release.
> 
>>  libsnet/profiled/
> 
> This is a result of the libsnet build.
> 
> andrew
> 
> 
>>
>> On 2012/02/04 07:46, Andrew Mortensen wrote:
>>>
>>> On Feb 4, 2012, at 4:12 AM, Chris Hecker wrote:
>>>
>>>>
>>>> Is that patch going to be in 3.2.0?  I didn't see it in the release
>>>> notes you just posted...
>>>
>>> Yes, it's in there. Forgot to add it to the notes. Please test and let me 
>>> know if it's working for you.
>>>
>>> andrew
>>>
>>>
>>>
>>>> On 2012/02/03 08:16, Andrew Mortensen wrote:
>>>>>
>>>>> On Feb 2, 2012, at 8:03 PM, Chris Hecker wrote:
>>>>>
>>>>>>
>>>>>> I have a kerberos account with an instance separator, so like foo/bar.
>>>>>> It can log into krb5 find, but if I try to log into cosign with it, it
>>>>>> fails in the cgi like this:
>>>>>>
>>>>>> cosign_login_krb5: login failed, referer: blah
>>>>>>
>>>>>> I haven't traced it farther than that yet (the cgi talks to the daemon
>>>>>> with cosign_login() right before that point, but there's nothing in the
>>>>>> daemon logs to indicate an error), and this time I did search for an FAQ
>>>>>> and didn't see anything, but should this work, or is it not supported?
>>>>>
>>>>> It's in this unreleased patch:
>>>>>
>>>>> <http://cosign.git.sourceforge.net/git/gitweb.cgi?p=cosign/cosign;a=commit;h=dbc2ccdda36e592fb0ee3a77fdfcaac40198ccd1>
>>>>>
>>>>> Coincidentally, cosign 3.2.0rc2 will be available later today. :)
>>>>>
>>>>> andrew
>>>>>
>>>>>
>>>>>
>>>>>> ------------------------------------------------------------------------------
>>>>>> Try before you buy = See our experts in action!
>>>>>> The most comprehensive online learning library for Microsoft developers
>>>>>> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
>>>>>> Metro Style Apps, more. Free future releases when you subscribe now!
>>>>>> http://p.sf.net/sfu/learndevnow-dev2
>>>>>> _______________________________________________
>>>>>> Cosign-discuss mailing list
>>>>>> Cosign-discuss@lists.sourceforge.net
>>>>>> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>
>> !DSPAM:4f3042f18171518617652!
>>
>>
>>
> 
> 

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss