openssh unix dev - Jul 2008 - [Bug 1490] New: sshd -T reports a string of UNKNOWNs

https://bugzilla.mindrot.org/show_bug.cgi?id=1490

           Summary: sshd -T reports a string of UNKNOWNs
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 5.1p1
          Platform: ix86
        OS/Version: Linux
            Status: NEW
          Severity: minor
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: nix-corp at esperi.org.uk


Created an attachment (id=1548)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1548)
My sshd config file

sshd 5.1p1's nifty new configure-dumping mode reports

port 22
protocol 2
addressfamily any
listenaddress 0.0.0.0:22
listenaddress [::]:22
serverkeybits 1024
logingracetime 600
keyregenerationinterval 3600
x11displayoffset 10
maxauthtries 6
clientaliveinterval 0
clientalivecountmax 3
permitrootlogin yes
ignorerhosts yes
ignoreuserknownhosts no
rhostsrsaauthentication no
hostbasedauthentication no
hostbasedusesnamefrompacketonly no
rsaauthentication yes
pubkeyauthentication yes
UNKNOWN no
UNKNOWN yes
UNKNOWN yes
UNKNOWN no
UNKNOWN no
UNKNOWN yes
passwordauthentication yes
kbdinteractiveauthentication no
challengeresponseauthentication no
printmotd yes
printlastlog yes
x11forwarding yes
x11uselocalhost yes
strictmodes yes
tcpkeepalive yes
permitemptypasswords no
permituserenvironment yes
uselogin no
compression delayed
gatewayports no
usedns yes
allowtcpforwarding yes
useprivilegeseparation yes
pidfile /var/run/sshd.pid
xauthlocation /usr/bin/xauth
authorizedkeysfile .ssh/authorized_keys
authorizedkeysfile2 .ssh/authorized_keys2
loglevel INFO
syslogfacility AUTH
hostkey /etc/openssh/ssh_host_key
hostkey /etc/openssh/ssh_host_rsa_key
hostkey /etc/openssh/ssh_host_dsa_key
acceptenv DISPLAY
acceptenv X_ORIGINATING_HOST
acceptenv LANG
acceptenv LC_*
subsystem sftp /usr/libexec/sftp-server
maxstartups 10:100:10
permittunnel no
permitopen

Bringing the UNKNOWNs into greater clarity with a few debugging
printf()s (the number is the opcode number, of course):

UNKNOWN opcode name(12) no
UNKNOWN opcode name(13) yes
UNKNOWN opcode name(14) yes
UNKNOWN opcode name(15) no
UNKNOWN opcode name(59) no
UNKNOWN opcode name(60) yes

Config attached: the only option that's there that the compiled OpenSSH
doesn't understand is UsePAM.

(In case it's interesting, this was compiled with GCC 4.3.1.)

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org,
                   |                            |dtucker at zip.com.au




--- Comment #1 from Damien Miller <djm at mindrot.org>  2008-07-23
17:12:38 ---
The UNKNOWN options seem to be all GSSAPI/Kerberos related. I think
they need to be #ifdef'd out when these aren't compiled in.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|unassigned-bugs at mindrot.org |dtucker at zip.com.au




--- Comment #2 from Darren Tucker <dtucker at zip.com.au>  2008-07-23
17:22:44 ---
Created an attachment (id=1549)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1549)
#ifdef out config dump options based on build-time config

Agreed, that's what it is.  Please try this patch.

I should have had a regress test for this.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1550|                            |ok?(dtucker at zip.com.au)
               Flag|                            |




--- Comment #3 from Damien Miller <djm at mindrot.org>  2008-07-23
17:25:35 ---
Created an attachment (id=1550)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1550)
do not display disabled options for -T

Do not try to print options for facilities that have not been enabled
at compile time.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1549|0                           |1
        is obsolete|                            |




--- Comment #4 from Darren Tucker <dtucker at zip.com.au>  2008-07-23
17:32:37 ---
(From update of attachment 1549)
djm's patch is better because it include UsePAM, please try it instead.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1550|                            |ok+
               Flag|                            |




-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490





--- Comment #5 from Nix <nix-corp at esperi.org.uk>  2008-07-23 17:37:02
---
Well, if *this* is the most serious bug I've ever seen in OpenSSH (and
it is, excepting interaction problems with severely buggy servers), I'm
satisfied :)

Patch 1550 fixes it for me.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Platform|ix86                        |All
         OS/Version|Linux                       |All
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED
             Blocks|                            |1481




--- Comment #6 from Damien Miller <djm at mindrot.org>  2008-07-23
17:46:51 ---
ok, this has been committed and will be in openssh-5.2.

Thanks for the report.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

remove
unsubscribe

bugzilla-daemon at bugzilla.mindrot.org wrote:
> https://bugzilla.mindrot.org/show_bug.cgi?id=1490
>
>
> Darren Tucker <dtucker at zip.com.au> changed:
>
>            What    |Removed                     |Added
>
----------------------------------------------------------------------------
>          AssignedTo|unassigned-bugs at mindrot.org |dtucker at zip.com.au
>
>
>
>
> --- Comment #2 from Darren Tucker <dtucker at zip.com.au>  2008-07-23
17:22:44 ---
> Created an attachment (id=1549)
>  --> (http://bugzilla.mindrot.org/attachment.cgi?id=1549)
> #ifdef out config dump options based on build-time config
>
> Agreed, that's what it is.  Please try this patch.
>
> I should have had a regress test for this.
>
>   
-- 

David Beecher, Executive Vice President and Chief Technical Officer
Digital Messaging Solutions, Inc.
678.446.3050 voice   866.881.7081 fax
http://www.dmsgs.com
We appreciate your business!

This e-mail may contain data that is confidential, proprietary or
"non-public personal information," as that term is defined in the
Gramm-Leach-Bliley Act (collectively, "Confidential Information"). The
Confidential Information is disclosed conditioned upon your agreement that
you will treat it confidentially and in accordance with applicable law,
ensure that such data isn't used or disclosed except for the limited purpose
for which it's being provided and will notify and cooperate with us
regarding any requested or unauthorized disclosure or use of any
Confidential Information. By accepting and reviewing the Confidential
Information you agree to indemnify us against any losses or expenses,
including attorney's fees that we may incur as a result of any unauthorized
use or disclosure of this data due to your acts or omissions. If a party
other than the intended recipient receives this e-mail, you are requested to
instantly notify us of the erroneous delivery and return to us all data so
delivered.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jonbernard at gmail.com




--- Comment #7 from Damien Miller <djm at mindrot.org>  2008-08-01
07:50:08 ---
*** Bug 1497 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1490


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED




--- Comment #8 from Damien Miller <djm at mindrot.org>  2009-02-23
13:35:50 ---
Close bugs fixed/reviewed for openssh-5.2 release

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.