a0ee8cc636
upstream) and a number of security fixes which we had already backported. MFC after: 1 week
33 lines
965 B
Bash
33 lines
965 B
Bash
# $OpenBSD: login-timeout.sh,v 1.7 2014/03/13 20:44:49 djm Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="connect after login grace timeout"
|
|
|
|
trace "test login grace with privsep"
|
|
cp $OBJ/sshd_config $OBJ/sshd_config.orig
|
|
grep -vi LoginGraceTime $OBJ/sshd_config.orig > $OBJ/sshd_config
|
|
echo "LoginGraceTime 10s" >> $OBJ/sshd_config
|
|
echo "MaxStartups 1" >> $OBJ/sshd_config
|
|
start_sshd
|
|
|
|
(echo SSH-2.0-fake; sleep 60) | telnet 127.0.0.1 ${PORT} >/dev/null 2>&1 &
|
|
sleep 15
|
|
${SSH} -F $OBJ/ssh_config somehost true
|
|
if [ $? -ne 0 ]; then
|
|
fail "ssh connect after login grace timeout failed with privsep"
|
|
fi
|
|
|
|
$SUDO kill `$SUDO cat $PIDFILE`
|
|
|
|
trace "test login grace without privsep"
|
|
echo "UsePrivilegeSeparation no" >> $OBJ/sshd_config
|
|
start_sshd
|
|
sleep 1
|
|
|
|
(echo SSH-2.0-fake; sleep 60) | telnet 127.0.0.1 ${PORT} >/dev/null 2>&1 &
|
|
sleep 15
|
|
${SSH} -F $OBJ/ssh_config somehost true
|
|
if [ $? -ne 0 ]; then
|
|
fail "ssh connect after login grace timeout failed without privsep"
|
|
fi
|