openssh unix dev - May 2001 - Rhosts Auth Issues with OpenSSH 2.9p1 on Solaris 2.7

I've installed OpenSSH 2.9p1 on Solaris 2.7 and I am trying to get rhost
authentication working.  Something appears to be wrong with the client
side as I can do rhost auth with a ssh1.2.27 client.  Any help would be
appreciated.

/opt/openssh-2.9p1/etc/ssh_config is:

ForwardX11 yes
RhostsAuthentication yes

/opt/openssh-2.9p1/etc/sshd_config is:

Port 22
IgnoreRhosts no
StrictModes yes
X11Forwarding yes
X11DisplayOffset 10
KeepAlive yes
SyslogFacility AUTH
LogLevel INFO
RhostsAuthentication yes
RhostsRSAAuthentication no
HostbasedAuthentication yes
RSAAuthentication yes
PasswordAuthentication yes
PermitEmptyPasswords no
Subsystem       sftp    /opt/openssh-2.9p1/libexec/sftp-server


Permissions:

newton at nighthawk [29] ls -l /opt/ssh/bin
total 23282
-rwxr-xr-x   1 root     other     355856 May  2 21:30 scp
-rwxr-xr-x   1 root     other     749044 May  2 21:30 sftp
lrwxrwxrwx   1 root     other          3 May  2 21:30 slogin -> ssh
-rws--x--x   1 root     other    3936684 May  2 21:30 ssh
-rwxr-xr-x   1 root     other    2004800 May  2 21:30 ssh-add
-rwxr-xr-x   1 root     other    1703916 May  2 21:30 ssh-agent
-rwxr-xr-x   1 root     other    2009980 May  2 21:30 ssh-keygen
-rwxr-xr-x   1 root     other    1073612 May  2 21:30 ssh-keyscan


When I run ssh -v I notice that Rhosts Auth is disabled.  Regardless if
I change this setting in ssh_config or not.  Trying to force Protocol 1
in either ssh_config or sshd_config has no effect.  Is this a bug with
OpenSSH-2.9p1 or am I doing something else wrong?

Here is some output:

newton at nighthawk [28] /opt/ssh/bin/ssh -v nighthawk
OpenSSH_2.9p1, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
debug1: Reading configuration data /opt/openssh-2.9p1/etc/ssh_config
debug1: Seeded RNG with 42 bytes from programs
debug1: Seeded RNG with 3 bytes from system calls
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 1412 geteuid 0 anon 1
debug1: Connecting to nighthawk [134.87.114.11] port 22.
debug1: temporarily_use_uid: 1412/67 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 1412/67 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/cs/newton/.ssh/identity type -1
debug1: Remote protocol version 1.5, remote software version
OpenSSH_2.9p1
debug1: match: OpenSSH_2.9p1 pat ^OpenSSH
debug1: Local version string SSH-1.5-OpenSSH_2.9p1
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug1: Host 'nighthawk' is known and matches the RSA1 host key.
debug1: Found key in /home/cs/newton/.ssh/known_hosts:6
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug1: Installing crc compensation attack detector.
debug1: Received encrypted confirmation.
debug1: Doing password authentication.
newton at nighthawk's password: 

Now here is output using ssh 1.2.27 client:

newton at nighthawk [30] /opt/ssh1/bin/ssh -v nighthawk 
SSH Version 1.2.27 [sparc-sun-solaris2.7], protocol version 1.5.
Standard version.  Does not use RSAREF.
nighthawk: Reading configuration data /opt/ssh1/etc/ssh_config
nighthawk: ssh_connect: getuid 1412 geteuid 0 anon 0
nighthawk: Connecting to nighthawk [134.87.114.11] port 22.
nighthawk: Allocated local port 1011.
nighthawk: Connection established.
nighthawk: Remote protocol version 1.5, remote software version
OpenSSH_2.9p1
nighthawk: Waiting for server public key.
nighthawk: Received server public key (768 bits) and host key (1024
bits).
nighthawk: Host 'nighthawk' is known and matches the host key.
nighthawk: Initializing random; seed file
/home/cs/newton/.ssh/random_seed
nighthawk: IDEA not supported, using 3des instead.
nighthawk: Encryption type: 3des
nighthawk: Sent encrypted session key.
nighthawk: Installing crc compensation attack detector.
nighthawk: Received encrypted confirmation.
nighthawk: Trying rhosts authentication.
nighthawk: Remote: Accepted by .shosts.
nighthawk: Requesting pty.
nighthawk: Requesting shell.
nighthawk: Entering interactive session.
Last login: Wed May  2 22:12:29 2001 from nighthawk
Sun Microsystems Inc.   SunOS 5.7       Generic October 1998
Sun Microsystems Inc.   SunOS 5.7       Generic October 1998
You have mail.

Cheers,

Jeff Newton

By default, ssh is not installed setuid root. Currently, you need to 
install it setuid root or it disables rhosts auth.

Of course, rhosts auth is a terrible idea. Are you _sure_ you mean rhosts 
auth, or do you mean RSARhosts/Hostbasedauth? These currently _also_ 
require that ssh be setuid root, but have far more security.

-- 
Carson