openssh unix dev - Jun 2002 - [Bug 294] tcp wrapper access changed between 2.9.9p2 and 3.3p1

http://bugzilla.mindrot.org/show_bug.cgi?id=294





------- Additional Comments From ktaylor at daac.gsfc.nasa.gov  2002-06-26 00:53
-------
This is what's reported in the syslog from openssh-2.9.9p2 - with an ip
address
range listed in hosts.allow

Jun 25 10:50:08 6D:server sshd[30123536]: Failed keyboard-interactive for
ktaylor from xxx.xxx.xxx.xxx port 40333 ssh2
Jun 25 10:50:13 6D:server sshd[30123536]: Accepted password for ktaylor from
xxx.xxx.xxx.xxx port 40333 ssh2

With openssh-3.3p1, I don't connect from the client, because I'm being
refused
from the server:

Jun 25 10:52:02 4D:server sshd[30412458]: refused connect from client.com



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=294

ktaylor at daac.gsfc.nasa.gov changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|normal                      |major





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=294





------- Additional Comments From markus at openbsd.org  2002-06-28 20:51 -------
that's all we changed:

        packet_set_connection(sock_in, sock_out);
 
        remote_port = get_remote_port();
        remote_ip = get_remote_ipaddr();
 
-       /* Check whether logins are denied from this host. */
 #ifdef LIBWRAP
-       /* XXX LIBWRAP noes not know about IPv6 */
+       /* Check whether logins are denied from this host. */
        {
                struct request_info req;
 
-               request_init(&req, RQ_DAEMON, __progname, RQ_FILE, sock_in,
NULL);
+               request_init(&req, RQ_DAEMON, __progname, RQ_FILE, sock_in,
0);
                fromhost(&req);
 
                if (!hosts_access(&req)) {
+                       debug("Connection refused by tcp wrapper");
                        refuse(&req);
-                       close(sock_in);
-                       close(sock_out);
+                       /* NOTREACHED */
+                       fatal("libwrap refuse returns");
                }
-/*XXX IPv6 verbose("Connection from %.500s port %d",
eval_client(&req),
remote_port); */
        }
 #endif /* LIBWRAP */
+
        /* Log the connection. */
        verbose("Connection from %.500s port %d", remote_ip,
remote_port);
 
:




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=294





------- Additional Comments From ktaylor at daac.gsfc.nasa.gov  2002-06-28 20:56
-------
hmm...that's weird. I wonder why the different behavior suddenly.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Hi All

I checked in the drafts but couldnot find more
information on SSH 1.
Is there any draft or any document available for SSH
1.
Where I can get more information for SSH1

Thanks

Barel

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

http://bugzilla.mindrot.org/show_bug.cgi?id=294

ktaylor at daac.gsfc.nasa.gov changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME



------- Additional Comments From ktaylor at daac.gsfc.nasa.gov  2002-06-28 21:43
-------
ok. I think I may be on to a way to get it working. If I compile it on IRIX with
the IRIX native compilers (n32 mode), everything is working as it probably
should.

However, when using gcc 2.95.3 on IRIX, it had the tcp wrapper problem. 

Why this is an issue at all, I don't know....and way beyond my area of
expertise
to figure out...and probably not worth the effort.

Thanks.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

check

http://www.snailbook.com/docs/protocol-1.5.txt

On Fri, Jun 28, 2002 at 04:37:50AM -0700, raam raam
wrote:
> Hi All
> 
> I checked in the drafts but couldnot find more
> information on SSH 1.
> Is there any draft or any document available for SSH
> 1.
> Where I can get more information for SSH1
> 
> Thanks
> 
> Barel
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

Hi All

Can somebody tells me whats the difference between SSL
and SSH. I feel whatever is done by SSH can be done by
SSL therefore why do we need SSH .

Is there any documnet available somewhere which can
explain the difference / usages of SSL and SSH


Regards

Barel

__________________________________________________
Do You Yahoo!?
Yahoo! Autos - Get free new car price quotes
http://autos.yahoo.com