Re: a bug detected in dropbear v071

2016-04-25 Thread Thomas De Schampheleire
ZHANG Hui P alcatel-sbell.com.cn> writes: > > > > Hi: > I am a software engineer of Alcatel-Lucent. In our product we use dropbear v071 under the OS: Linux version 3.4.24. At most time it works perfectly, but recently we got a problem: sometimes a child-process of > dropbear occupied

[PATCH 2/2] Support changing expired passwords in client

2016-04-25 Thread Joakim Tjernlund
This adds support for handling expired passwords in the client. Signed-off-by: Joakim Tjernlund --- auth.h | 1 + cli-auth.c | 8 ++- cli-authpasswd.c | 71 3 files changed, 74 insertions(+), 6 deletions(-) diff --gi

[PATCH 1/2] Support changing expired passwords

2016-04-25 Thread Joakim Tjernlund
This adds support for handling expired passwords in the server. Client remains to do. Signed-off-by: Joakim Tjernlund --- auth.h| 1 + svr-auth.c| 21 + svr-authpam.c | 52 +--- 3 files changed, 59 insertions(+), 15

Re: dropbear and PAM_NEW_AUTHTOK_REQ ?

2016-04-25 Thread Joakim Tjernlund
On Fri, 2016-04-22 at 21:48 +0800, Matt Johnston wrote: > Hi Joakim, > > Does this work for changing passwords? I'm not entirely clear on what > pam_chauthtok() does, but if it tries > a PAM conversation with the user it won't work - Dropbear's PAM password > login is a bit of a hack to just > r