search for: controlmaster

Hi, It seems there is a problem regarding ControlMaster and scp'ing a file depending on the current working directory: $ cd ~/Personnel $ scp -o ControlMaster=yes cox.jpg host.local: muxserver_listen bind(): No such file or directory lost connection $ scp -o ControlMaster=no cox.jpg host.local: cox.jpg 100%...

Dear Mailing List We are using a ControlMaster with a short ControlPersist to access the bastion host which then gives access to customer hosts. Our Information Security Manager would like to disallow the ControlMaster. His attack scenario is an admin workstation with a compromised root account. An attacker can then use the ControlMaster to...

https://bugzilla.mindrot.org/show_bug.cgi?id=2621 Bug ID: 2621 Summary: ControlMaster started by scp (non-ssh?) doesn't forward agent Product: Portable OpenSSH Version: 7.3p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: Miscellaneous...

https://bugzilla.mindrot.org/show_bug.cgi?id=2414 Bug ID: 2414 Summary: ControlMaster directive should be ignored on Cygwin Product: Portable OpenSSH Version: -current Hardware: Other OS: Cygwin on NT/2k Status: NEW Severity: enhancement Priority: P5 Component: ssh Assignee: unassigned...

https://bugzilla.mindrot.org/show_bug.cgi?id=1382 Summary: scp/sftp sometimes hangs as a ControlMaster slave Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: ix86 OS/Version: Mac OS X Status: NEW Severity: normal Priority: P2 Component: scp AssignedTo: bitbucket at mindrot.org...

https://bugzilla.mindrot.org/show_bug.cgi?id=2437 Bug ID: 2437 Summary: ssh with ControlMaster and ControlPath hangs on 2nd session in same terminal Product: Portable OpenSSH Version: 6.7p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5 Component: ssh As...

When I'm running interactive ssh session which is ControlMaster and I run scp or sftp to same host, creating another channel, it seems that ssh is stuffing the packets together exceeding MTU. I've for years ran QoS where I prioritize small packets, as it is clean and easy way to guarantee low latency to pretty much all you care for. Unfortunately ControlMa...

https://bugzilla.mindrot.org/show_bug.cgi?id=1938 Bug #: 1938 Summary: EscapeChar sometimes don't work when using ControlMaster Classification: Unclassified Product: Portable OpenSSH Version: 5.8p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: unassigned-bugs at mindrot.org...

TL;DR: I expect ProxyCommand to have effect in preference to ControlPath. I've just tripped over this one. I have an ssh Host (let us call it "MAIN") with a ControlPath and with ControlMaster=no, from the .ssh/config file. I also have a shell script whose purpose is to hop to a remote host through a port forward, which uses the ProxyCommand option like this: ProxyCommand ssh MAIN nc 127.0.0.1 7777 because the remote host is accessible via port 7777 on host MAIN. So the script inv...

I use ControlMaster auto (along with ControlPath) in my ssh config and find it very handy. I have noticed an annoying behavior, though: it seems that if there is no existing master connection and ssh creates a new one, the master connection process that is started has its stderr left open. This has manifested itself...

https://bugzilla.mindrot.org/show_bug.cgi?id=1994 Bug #: 1994 Summary: document which settings/etc. get "persistent" with the ControlMaster connection Classification: Unclassified Product: Portable OpenSSH Version: 5.9p1 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: Documentation AssignedTo: unassigned-...

https://bugzilla.mindrot.org/show_bug.cgi?id=1617 Summary: -L & -R do not work for slave ControlMaster connections Product: Portable OpenSSH Version: 5.1p1 Platform: ix86 OS/Version: FreeBSD Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: unassigned-bugs at mindrot.org...

https://bugzilla.mindrot.org/show_bug.cgi?id=3743 Bug ID: 3743 Summary: ControlMaster forces ForkAfterAuthentication even when not wanted, and can't be disabled Product: Portable OpenSSH Version: 9.9p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Co...

...ler wrote: > So IMO disallowing session multiplexing is at most a speedbump that an > attacker will cross with relative ease. Speedbumps make sense sometimes, An attacker getting root on the jumphost gets immediate control of any _current_ persistent connections and new connections. Without ControlMaster it's a _lot_ harder to take control of current connections, but pretty easy to subvert new connections. So there is a benefit... but a small one. > but they must be weighed against their inconvenience. This is pretty much true of all security controls :-) -- rgds Stephen

https://bugzilla.mindrot.org/show_bug.cgi?id=2065 Bug ID: 2065 Summary: double confirmation with ssh-add -c and ControlMaster autoask Classification: Unclassified Product: Portable OpenSSH Version: 6.0p1 Hardware: All OS: Linux Status: NEW Severity: normal Priority: P3 Component: ssh Assignee: unassig...

https://bugzilla.mindrot.org/show_bug.cgi?id=1517 Summary: ssh ControlMaster process is crashing frequently when multiplexing ssh and scp connections with error 'select: Invalid argument' Product: Portable OpenSSH Version: 5.1p1 Platform: Sparc OS/Version: Solaris Status: NEW...

...udo rights or so. What's the goal? - Drop NRPE and use SSH instead of it, if the latter can be made as fast (or nearly as fast) as NRPE. - Use rssh to restrict the commands that may be run. - Use SSH-keys to allow the Nagios node to login to the (rssh-restricted) remote host. USING CONTROLMASTER: I guess it's inevitable to use ControlMaster for the connections from the Nagios host to the remot hosts. The actual connections for the commands usually close immediately, so a spawner is required that keeps up a connection for ALL checked hosts. I.e. something like: for each host ssh -f...

http://bugzilla.mindrot.org/show_bug.cgi?id=1278 Summary: CYGWIN controlMaster connections don't work. Product: Portable OpenSSH Version: v4.5p1 Platform: ix86 OS/Version: Cygwin on NT/2k Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org...

https://bugzilla.mindrot.org/show_bug.cgi?id=3067 Bug ID: 3067 Summary: Fails to unlink ControlMaster socket early enough, confuses other clients Product: Portable OpenSSH Version: 7.9p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: ssh Assignee: un...

https://bugzilla.mindrot.org/show_bug.cgi?id=3589 Bug ID: 3589 Summary: ControlMaster auto, persist and -f fail. Product: Portable OpenSSH Version: 9.3p1 Hardware: amd64 OS: Linux Status: NEW Severity: minor Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org...