openssh unix dev - Dec 2002 - OpenUsePrivilegeSeparation on Compaq V5.1A with C2/SIA Security

I'm using OpenSSH_3.5p1 (server protocol 2.0 ) on a Compaq device V5.1A with
C2 Security (SIA)
configured.

I must set UsePrivilegeSeparation to no to get this working.

Does anyone have PrivilegeSeparation working on a Compaq device with C2
Security configured?

Source device:

ssh user at destination ( produces these errors)

sshd: /var/tcb/files/__db_lock.share: Permission denied
sshd: /var/tcb/files/__db_lock.share: Permission denied
sshd: /var/tcb/files/__db_lock.share: Permission denied
sshd: /var/tcb/files/__db_lock.share: Permission denied
sshd: /var/tcb/files/__db_lock.share: Permission denied
Cannot obtain database information on this terminal

Connection to xxx closed.

Destination device:

auth log produces these errors:

Dec 19 06:24:02 compaqC2 sshd[60103]: audgen(LOGIN): Permission denied
Dec 19 06:24:02 compaqC2 sshd[60103]: fatal: Couldn't establish session for
clarkinm from xxx


Mike Clarkin
mailto:clarkin.michael at ic.gc.ca
Unix Server Support
Telecommunications, Network Development & Operations
(613)954-2837

No one has successfully show SIA + Privsep in any configuration.

- Ben

On Thu, 19 Dec 2002 Clarkin.Michael at ic.gc.ca wrote:
> I'm using OpenSSH_3.5p1 (server protocol 2.0 ) on a Compaq device V5.1A
with
> C2 Security (SIA)
> configured.
>
> I must set UsePrivilegeSeparation to no to get this working.
>
> Does anyone have PrivilegeSeparation working on a Compaq device with C2
> Security configured?
>
> Source device:
>
> ssh user at destination ( produces these errors)
>
> sshd: /var/tcb/files/__db_lock.share: Permission denied
> sshd: /var/tcb/files/__db_lock.share: Permission denied
> sshd: /var/tcb/files/__db_lock.share: Permission denied
> sshd: /var/tcb/files/__db_lock.share: Permission denied
> sshd: /var/tcb/files/__db_lock.share: Permission denied
> Cannot obtain database information on this terminal
>
> Connection to xxx closed.
>
> Destination device:
>
> auth log produces these errors:
>
> Dec 19 06:24:02 compaqC2 sshd[60103]: audgen(LOGIN): Permission denied
> Dec 19 06:24:02 compaqC2 sshd[60103]: fatal: Couldn't establish session
for
> clarkinm from xxx
>
>
> Mike Clarkin
> mailto:clarkin.michael at ic.gc.ca
> Unix Server Support
> Telecommunications, Network Development & Operations
> (613)954-2837
>
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>