OpenSSH, PAM and kerberos

2013-08-28 Thread Slawa Olhovchenkov
I am try to setup single sign-on and found this is imposuble due to bug in OpenSSH: currently sshd do pam_authenticate() and pam_acct_mgmt() from child process, but pam_setcred() from paren proccess. pam_krb5 in pam_sm_setcred() required information from pam_sm_authenticate and can't work corretly

Re: [kde-freebsd] virtualbox file dialog problem

2013-08-28 Thread Jilles Tjoelker
On Wed, Aug 28, 2013 at 03:09:53PM +0300, Andriy Gapon wrote: > on 18/07/2013 10:06 Andriy Gapon said the following: > > on 18/07/2013 03:25 Greg Rivers said the following: > >> On Wed, 17 Jul 2013, Andriy Gapon wrote: > >>> I run virtualbox in KDE environment. A while ago (can't say > >>> exactl

Re: [kde-freebsd] virtualbox file dialog problem

2013-08-28 Thread Andriy Gapon
on 28/08/2013 15:09 Andriy Gapon said the following: > Now a description of the problem. > > 1. VirtualBox executable is installed setuid root. Apparently, when it is run > it does some privileged things and then drops all of the uids and gids (real, > effective and saved) back to what they shoul

Re: [kde-freebsd] virtualbox file dialog problem

2013-08-28 Thread Andriy Gapon
on 18/07/2013 10:06 Andriy Gapon said the following: > on 18/07/2013 03:25 Greg Rivers said the following: >> On Wed, 17 Jul 2013, Andriy Gapon wrote: >> >>> I run virtualbox in KDE environment. A while ago (can't say exactly when) I >>> started to have a problem where any file opening dialog woul

RE: security/openssl speed issues

2013-08-28 Thread Dewayne Geraghty
John,Ollivier, I've found the openssl speed tests to be an unreliable measure of comparison. I think you might be better served by comparing the performance of encrypting/decrypting content, such as dd if=/dev/zero bs=1M count=100 | openssl aes-128-cbc -e -pass pass:secretpwd | \ openssl aes

Re: security/openssl speed issues

2013-08-28 Thread Ollivier Robert
According to John-Mark Gurney on Tue, Aug 27, 2013 at 07:27:28PM -0700: > I guess now we need to figure out how to teach OpenSSL to use AES-NI > natively even when /dev/crypto is available... > > but at least we did solve the (non-)issue of bad OpenSSL performance... Excellent analysis, thank you