Attachment 779 Details for Bug 909 – add source address/hostname to log messages.

[patch] add source address/hostname to log messages.

openbsd-sshd-logdenysource.patch (text/plain), 2.27 KB, created by Darren Tucker on 2005-01-20 23:22:56 AEDT

(hide)

Description:

Filename:

MIME Type:

Creator: Darren Tucker

Created: 2005-01-20 23:22:56 AEDT

Size: 2.27 KB

patch

obsolete

>Index: auth.c
>===================================================================
>RCS file: /cvs/src/usr.bin/ssh/auth.c,v
>retrieving revision 1.56
>diff -u -p -r1.56 auth.c
>--- auth.c	28 Jul 2004 09:40:29 -0000	1.56
>+++ auth.c	20 Jan 2005 12:19:47 -0000
>@@ -99,8 +99,9 @@ allowed_user(struct passwd * pw)
> 		for (i = 0; i < options.num_deny_users; i++)
> 			if (match_user(pw->pw_name, hostname, ipaddr,
> 			    options.deny_users[i])) {
>-				logit("User %.100s not allowed because listed in DenyUsers",
>-				    pw->pw_name);
>+				logit("User %.100s from %.100s not allowed "
>+				    "because listed in DenyUsers",
>+				    pw->pw_name, hostname);
> 				return 0;
> 			}
> 	}
>@@ -112,16 +113,16 @@ allowed_user(struct passwd * pw)
> 				break;
> 		/* i < options.num_allow_users iff we break for loop */
> 		if (i >= options.num_allow_users) {
>-			logit("User %.100s not allowed because not listed in AllowUsers",
>-			    pw->pw_name);
>+			logit("User %.100s from %.100s not allowed because "
>+			    "not listed in AllowUsers", pw->pw_name, hostname);
> 			return 0;
> 		}
> 	}
> 	if (options.num_deny_groups > 0 || options.num_allow_groups > 0) {
> 		/* Get the user's group access list (primary and supplementary) */
> 		if (ga_init(pw->pw_name, pw->pw_gid) == 0) {
>-			logit("User %.100s not allowed because not in any group",
>-			    pw->pw_name);
>+			logit("User %.100s from %.100s not allowed because "
>+			    "not in any group", pw->pw_name, hostname);
> 			return 0;
> 		}
> 
>@@ -130,8 +131,9 @@ allowed_user(struct passwd * pw)
> 			if (ga_match(options.deny_groups,
> 			    options.num_deny_groups)) {
> 				ga_free();
>-				logit("User %.100s not allowed because a group is listed in DenyGroups",
>-				    pw->pw_name);
>+				logit("User %.100s from %.100s not allowed "
>+				    "because a group is listed in DenyGroups",
>+				    pw->pw_name, hostname);
> 				return 0;
> 			}
> 		/*
>@@ -142,8 +144,9 @@ allowed_user(struct passwd * pw)
> 			if (!ga_match(options.allow_groups,
> 			    options.num_allow_groups)) {
> 				ga_free();
>-				logit("User %.100s not allowed because none of user's groups are listed in AllowGroups",
>-				    pw->pw_name);
>+				logit("User %.100s from %.100s not allowed "
>+				    "because none of user's groups are listed "
>+				    "in AllowGroups", pw->pw_name, hostname);
> 				return 0;
> 			}
> 		ga_free();

Actions: View | Diff

Attachments on bug 909: 779