-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2.1pre18. This is mainly merges from the OpenBSD tree, bugfixes for Solaris and libc5 Linux systems. It should fix all reported bugs except the snprintf problems on some older Solaris versions. Please test thoroughly, my hope is to have a stable version released before Jan 1. At this point the main holdup is Solaris. I have had to disbale direct downloads from violet.ibs.com.au, demand for OpenSSH is saturating our little ISDN connection. I notice that: ftp://ftp.localhost.ca/pub/openssh/files/ (Canada) ftp://ftp.firedrake.org/openssh/files/ (UK) ftp://thermo.stat.ncsu.edu/pub/openssh/files/ (USA *only*) have already updated. Regards, Damien Changelog: 19991216 - Makefile changes for Solaris from Peter Kocks <peter.kocks at baygate.com> - Minor updates to docs - Merged OpenBSD CVS changes: - [authfd.c ssh-agent.c] keysize warnings talk about identity files - [packet.c] "Connection closed by x.x.x.x": fatal() -> log() - Correctly handle empty passwords in shadow file. Patch from: "Chris, the Young One" <cky at pobox.com> - Released 1.2.1pre18 19991215 - Integrated patchs from Juergen Keil <jk at tools.de> - Avoid void* pointer arithmatic - Use LDFLAGS correctly - Fix SIGIO error in scp - Simplify status line printing in scp - Added better test for inline functions compiler support from Darren_Hall at progressive.com 19991214 - OpenBSD CVS Changes - [canohost.c] fix get_remote_port() and friends for sshd -i; Holger.Trapp at Informatik.TU-Chemnitz.DE - [mpaux.c] make code simpler. no need for memcpy. niels@ ok - [pty.c] namebuflen not sizeof namebuflen; bnd at ep-ag.com via djm at mindrot.org fix proto; markus - [ssh.1] typo; mark.baushke at solipsa.com - [channels.c ssh.c ssh.h sshd.c] type conflict for 'extern Type *options' in channels.c; dot at dotat.at - [sshconnect.c] move checking of hostkey into own function. - [version.h] OpenSSH-1.2.1 - Clean up broken includes in pty.c - Some older systems don't have poll.h, they use sys/poll.h instead - Doc updates 19991211 - Fix compilation on systems with AFS. Reported by aloomis at glue.umd.edu - Fix installation on Solaris. Reported by Gordon Rowell <gordonr at gormand.com.au> - Fix gccisms (__attribute__ and inline). Report by edgy at us.ibm.com, patch from Markus Friedl <markus.friedl at informatik.uni-erlangen.de> - Auto-locate xauth. Patch from David Agraz <dagraz at jahoopa.com> - Compile fix from David Agraz <dagraz at jahoopa.com> - Avoid compiler warning in bsd-snprintf.c - Added pam_limits.so to default PAM config. Suggested by Jim Knoble <jmknoble at pobox.com> - -- | "Bombay is 250ms from New York in the new world order" - Alan Cox | Damien Miller - http://www.mindrot.org/ | Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.0 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE4WMBzormJ9RG1dI8RAgl/AJ9Np2Coj/di+ijmZ3uDoY/4ZR/+hgCeJrap 9mpaUL2o7DCCGJ+MWzKAukY=PQve -----END PGP SIGNATURE-----
Solaris 7/x86: gcc -g -O2 -Wall -I/usr/slocal/include -DETCDIR=\"/usr/local/etc\" -DSSH_PROGRAM=\"/usr/slocal/bin/ssh\" -DSSH_ASKPASS_DEFAULT=\"/usr/slocal/libexec/ssh/ssh-askpass\" -DHAVE_CONFIG_H -c canohost.c -o canohost.o canohost.c: In function `get_remote_hostname': canohost.c:62: warning: subscript has type `char' canohost.c: In function `peer_connection_is_on_socket': canohost.c:163: `AF_INET6' undeclared (first use in this function) canohost.c:163: (Each undeclared identifier is reported only once canohost.c:163: for each function it appears in.) make: *** [canohost.o] Error 1 On Thu, 16 Dec 1999, Damien Miller wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have just uploaded 1.2.1pre18. > > This is mainly merges from the OpenBSD tree, bugfixes for Solaris > and libc5 Linux systems. It should fix all reported bugs except the > snprintf problems on some older Solaris versions. > > Please test thoroughly, my hope is to have a stable version > released before Jan 1. At this point the main holdup is Solaris. > > I have had to disbale direct downloads from violet.ibs.com.au, > demand for OpenSSH is saturating our little ISDN connection. > I notice that: > > ftp://ftp.localhost.ca/pub/openssh/files/ (Canada) > ftp://ftp.firedrake.org/openssh/files/ (UK) > ftp://thermo.stat.ncsu.edu/pub/openssh/files/ (USA *only*) > > have already updated. > > Regards, > Damien > > Changelog: > > 19991216 > - Makefile changes for Solaris from Peter Kocks > <peter.kocks at baygate.com> > - Minor updates to docs > - Merged OpenBSD CVS changes: > - [authfd.c ssh-agent.c] > keysize warnings talk about identity files > - [packet.c] > "Connection closed by x.x.x.x": fatal() -> log() > - Correctly handle empty passwords in shadow file. Patch from: > "Chris, the Young One" <cky at pobox.com> > - Released 1.2.1pre18 > > 19991215 > - Integrated patchs from Juergen Keil <jk at tools.de> > - Avoid void* pointer arithmatic > - Use LDFLAGS correctly > - Fix SIGIO error in scp > - Simplify status line printing in scp > - Added better test for inline functions compiler support from > Darren_Hall at progressive.com > > 19991214 > - OpenBSD CVS Changes > - [canohost.c] > fix get_remote_port() and friends for sshd -i; > Holger.Trapp at Informatik.TU-Chemnitz.DE > - [mpaux.c] > make code simpler. no need for memcpy. niels@ ok > - [pty.c] > namebuflen not sizeof namebuflen; bnd at ep-ag.com via djm at mindrot.org > fix proto; markus > - [ssh.1] > typo; mark.baushke at solipsa.com > - [channels.c ssh.c ssh.h sshd.c] > type conflict for 'extern Type *options' in channels.c; dot at dotat.at > - [sshconnect.c] > move checking of hostkey into own function. > - [version.h] > OpenSSH-1.2.1 > - Clean up broken includes in pty.c > - Some older systems don't have poll.h, they use sys/poll.h instead > - Doc updates > > 19991211 > - Fix compilation on systems with AFS. Reported by > aloomis at glue.umd.edu > - Fix installation on Solaris. Reported by > Gordon Rowell <gordonr at gormand.com.au> > - Fix gccisms (__attribute__ and inline). Report by edgy at us.ibm.com, > patch from Markus Friedl <markus.friedl at informatik.uni-erlangen.de> > - Auto-locate xauth. Patch from David Agraz <dagraz at jahoopa.com> > - Compile fix from David Agraz <dagraz at jahoopa.com> > - Avoid compiler warning in bsd-snprintf.c > - Added pam_limits.so to default PAM config. Suggested by > Jim Knoble <jmknoble at pobox.com> > > > - -- > | "Bombay is 250ms from New York in the new world order" - Alan Cox > | Damien Miller - http://www.mindrot.org/ > | Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work) > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.0 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > iD8DBQE4WMBzormJ9RG1dI8RAgl/AJ9Np2Coj/di+ijmZ3uDoY/4ZR/+hgCeJrap > 9mpaUL2o7DCCGJ+MWzKAukY> =PQve > -----END PGP SIGNATURE----- > > >Marc G. Fournier marc.fournier at acadiau.ca Senior Systems Administrator Acadia University "These are my opinions, which are not necessarily shared by my employer"
Solaris 7/x86: ===========================================> ssh new-relaymarc at new-relay's password: Last login: Thu Dec 16 09:27:06 1999 from atelier.acadiau. Sun Microsystems Inc. SunOS 5.7 Generic October 1998 login: scrappy Password: Login incorrect login: marc Password: No utmpx entry. You must exec "login" from the lowest level "shell". Connection to new-relay closed.>========================================== Marc G. Fournier marc.fournier at acadiau.ca Senior Systems Administrator Acadia University "These are my opinions, which are not necessarily shared by my employer"
I think a better solution would be to check if AF_INET6 exists and do the first if it does and do the second if it doesn't. sorry I don't have the patch as I'm not at home. Regards, Ben --- Damien Miller <djm at mindrot.org> wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Thu, 16 Dec 1999, Marc G. Fournier wrote: > > > > > Solaris 7/x86: > > > > canohost.c:163: `AF_INET6' undeclared (first use > in this function) > > Could you try the attached patch. > > The IPv6 support in the OpenBSD tree must be landing > sooner than > I expected. > > Damien > > - -- > | "Bombay is 250ms from New York in the new world > order" - Alan Cox > | Damien Miller - http://www.mindrot.org/ > | Email: djm at mindrot.org (home) -or- djm at ibs.com.au > (work) > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.0 (GNU/Linux) > Comment: For info see http://www.gnupg.org > >iD8DBQE4WPDWormJ9RG1dI8RAusbAJ4gFv2WOyCRv4mPsZiAGOtfeE6GfgCffLhV> 6OxEsXItr9gc4tRLdWFuBW8> =JRev > -----END PGP SIGNATURE----- > > Index: canohost.c >==================================================================> RCS file: /var/cvs/openssh/canohost.c,v> retrieving revision 1.5 > diff -u -r1.5 canohost.c > --- canohost.c 1999/12/13 23:47:15 1.5 > +++ canohost.c 1999/12/16 14:01:37 > @@ -160,8 +160,9 @@ > memset(&from, 0, sizeof(from)); > if (getpeername(in, (struct sockaddr *) & from, > &fromlen) < 0) > return 0; > - if (from.sin_family != AF_INET && from.sin_family > != AF_INET6) > + if (from.sin_family != AF_INET) > return 0; > + > return 1; > } > >__________________________________________________ Do You Yahoo!? Thousands of Stores. Millions of Products. All in one place. Yahoo! Shopping: http://shopping.yahoo.com
Hmmm. Guess I better go check Solaris 8 again, cause I could have sworn it was 26. Not only that, it shows up twice... I still think the better solution is to not define it if you don't have it. Ben --- Markus Friedl <Markus.Friedl at informatik.uni-erlangen.de> wrote:> On Thu, Dec 16, 1999 at 09:23:41AM -0400, Marc G. > Fournier wrote: > > canohost.c:163: `AF_INET6' undeclared (first use > in this function) > > canohost.c:163: (Each undeclared identifier is > reported only once > > canohost.c:163: for each function it appears in.) > > make: *** [canohost.o] Error 1 > > you can try > #define AF_INET6 24 /* IPv6 > */ > > >__________________________________________________ Do You Yahoo!? Thousands of Stores. Millions of Products. All in one place. Yahoo! Shopping: http://shopping.yahoo.com