openssh unix dev - Jan 2000 - SSH problems ...

Okay, we think we've resolved them all now *wipe brow*

There were two outstanding problems...

Problem 1:

The config file has two directives in it:

IgnoreRhosts
RhostsAuthentication

Without realizing it, even though I had IgnoreRhosts set to 'no',
RhostsAuthentication was set to 'no' also, so it didn't matter ...

This appears to fix the authentication issue of last week :(  


Problem 2:

A regular user can't ssh to another users account on a remote server
without a password ... the .rhosts file on the remote server granted
permission, but it wouldn't work.

Thanks to one of the guys on the list, for pointing out the 'reserved
port' issue, I checked my FreeBSD machine's install of OpenSSH and
noticed
that both ssh and scp are set 4555, vs 755 on the Solaris machine.  It
appears that the OpenSSH distribution doesn't set this, which is what
caused that problem ...

So far, it appears that both are fixed ... Problem 2, I think, needs to be
fixed in 'make install' of the distribution though ...



Marc G. Fournier                                 marc.fournier at acadiau.ca
Senior Systems Administrator                            Acadia University

  "These are my opinions, which are not necessarily shared by my
employer"

On Tue, 18 Jan 2000, Marc G. Fournier wrote:
> Thanks to one of the guys on the list, for pointing out the
> 'reserved port' issue, I checked my FreeBSD machine's install
of
> OpenSSH and noticed that both ssh and scp are set 4555, vs 755 on
> the Solaris machine.  It appears that the OpenSSH distribution
> doesn't set this, which is what caused that problem ...
You are correct, the makefile does not set the suid bit. This is
deliberate, but I will add a note to the UPGRADING text.

Damien

--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)