openssh bugs - Dec 2005 - [Bug 1128] Configuration keyword "ShostsFile (or RhostsFile)" does not exist

http://bugzilla.mindrot.org/show_bug.cgi?id=1128

           Summary: Configuration keyword "ShostsFile (or RhostsFile)"
does
                    not exist
           Product: Portable OpenSSH
           Version: 4.2p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P3
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: sasajima at pc.fujitsu.com


Configuration keyword "AuthorizedKeyFile" is very useful.
If your sshd permits PubkeyAuthentication and you want to that only root user
edits all authorized_keys files in the host, you can use
"AuthorizedKeyFile" to
put the file into system configuration directory.

If your sshd permits HostbasedAuthentication and you want to that only root
user edits all .shosts/.rhosts files, you will need configuration keyword
"ShostsFile".




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1128





------- Comment #1 from djm at mindrot.org  2005-12-01 19:03 -------
If you want deny user control of HostbasedAuthentication, then you can enter
users in /etc/shosts.equiv and set IgnoreRhosts=yes in sshd_config

Does that solve your problem?




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1128





------- Comment #2 from sasajima at pc.fujitsu.com  2005-12-01 19:13 -------
Created an attachment (id=1033)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1033&action=view)
this patch appends configuration keyword "ShostsFile"

This patch works in my Solaris8 box.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1128





------- Comment #3 from sasajima at pc.fujitsu.com  2005-12-01 19:35 -------
(In reply to comment #1)
> If you want deny user control of HostbasedAuthentication, then you can
enter
> users in /etc/shosts.equiv and set IgnoreRhosts=yes in sshd_config
> 
> Does that solve your problem?
> 
No, hosts.equiv only solves following: 

   foo at localhost -> foo at remotehost

But I assume following:

   foo at localhost -> bar at remotehost




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.