>From 31315a73c0d1c35961a64e2ee8dab0f5a203fb1a Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Fri, 17 Oct 2014 18:14:53 +0200 Subject: [PATCH 19/19] SSH: Run the ssh responder as the SSSD user --- src/monitor/monitor.c | 3 ++- src/responder/ssh/sshsrv.c | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/src/monitor/monitor.c b/src/monitor/monitor.c index d09aeba9033ff1460f9d4a6c51f35edbf2e67fa6..0dea327213a1ad04b6f69c0ffb0fb87254420796 100644 --- a/src/monitor/monitor.c +++ b/src/monitor/monitor.c @@ -1066,7 +1066,8 @@ static bool svc_supported_as_nonroot(const char *svc_name) || (strcmp(svc_name, "pam") == 0) || (strcmp(svc_name, "autofs") == 0) || (strcmp(svc_name, "pac") == 0) - || (strcmp(svc_name, "sudo") == 0)) { + || (strcmp(svc_name, "sudo") == 0) + || (strcmp(svc_name, "ssh") == 0)) { return true; } return false; diff --git a/src/responder/ssh/sshsrv.c b/src/responder/ssh/sshsrv.c index b154ee1baa16de68f642d2e967b8e7c873c8d4e7..b1969b49de8579f0136c3afa78eb16d68c81ee4e 100644 --- a/src/responder/ssh/sshsrv.c +++ b/src/responder/ssh/sshsrv.c @@ -215,7 +215,8 @@ int main(int argc, const char *argv[]) /* set up things like debug, signals, daemonization, etc... */ debug_log_file = "sssd_ssh"; - ret = server_setup("sssd[ssh]", 0, 0, 0, CONFDB_SSH_CONF_ENTRY, &main_ctx); + ret = server_setup("sssd[ssh]", 0, uid, gid, + CONFDB_SSH_CONF_ENTRY, &main_ctx); if (ret != EOK) { return 2; } -- 1.9.3