search for: entropy_timeout_msec

...ctxt->service) != 0) { packet_disconnect("Change of username or service not allowed: " --- openssh-4.2p1/config.h.in~ 2005-09-01 10:15:22.000000000 +0100 +++ openssh-4.2p1/config.h.in 2006-01-07 17:44:23.000000000 +0000 @@ -152,6 +152,9 @@ /* Builtin PRNG command timeout */ #undef ENTROPY_TIMEOUT_MSEC +/* Use privilege separation */ +#undef USE_PRIVSEP + /* non-privileged user for privilege separation */ #undef SSH_PRIVSEP_USER --- openssh-4.2p1/configure.ac~ 2005-08-31 17:59:49.000000000 +0100 +++ openssh-4.2p1/configure.ac 2006-01-07 18:41:38.000000000 +0000 @@ -1873,6 +1873,16 @@ AC_ARG...

...small (100 msec). I raised it to 2000 msec (500 msec was too small, too) and now it works without these error messages. The messages "No child process" is a consequence of the interrupted system call message. The location to fix is in config.h: /* Builtin PRNG command timeout */ #define ENTROPY_TIMEOUT_MSEC 100 I changed the original 100 to 2000, did a "make sshd" and that's it. Hope this helps, Norbert. P.S. The real fix for the next release would be to either ask for the timeout value, determine it automagically in some way or change the hard-coded value of 100 in the "configu...

...k on this port, I'm obliging. The biggest problem I've run into so far is in the builtin PRNG command timeout parameter. Frequently, when the value's set to 200 ms, I'll fail to get *any* results added to the entropy pool, and the outgoing ssh connection fails as a result. Upping ENTROPY_TIMEOUT_MSEC to 500 seems to have cleared this problem nicely on my old crufty 144MHz Indy. The builtin PRNG seeding is *much* preferable to the prior perl-based EGD. Many thanks, -jml A few high/easy portability points: ** There seems to be a pointer problem in vsnprintf: cc -n32 -I/usr/local/inclu...

...onfig.h Mon Jun 4 13:53:36 2001 *************** *** 95,100 **** --- 95,103 ---- /* Port number of PRNGD/EGD random number socket */ #undef PRNGD_PORT + /* Use builtin entropy collector if nothing else available */ + #undef USE_BUILTIN_ENTROPY + /* Builtin PRNG command timeout */ #undef ENTROPY_TIMEOUT_MSEC

http://bugzilla.mindrot.org/show_bug.cgi?id=651 ------- Additional Comments From vikashb at comparexafrica.co.za 2003-12-30 16:39 ------- tried openssh-SNAP-20031223 does not compile: (cd openbsd-compat && make) gcc -g -O2 -Wall -Wpointer-arith -Wno-uninitialized -I. -I.. -I. -I./.. -I/usr/local/ssl/include -Dftruncate=chsize -I/usr/local/include -DHAVE_CONFIG_H -c

...*/ /* #undef USE_PAM */ /* #undef WITH_AIXAUTHENTICATE */ /* #undef AIX_LOGINFAILED_4ARG */ /* #undef SKEYCHALLENGE_4ARG */ /* #undef WITH_IRIX_ARRAY */ /* #undef WITH_IRIX_PROJECT */ /* #undef WITH_IRIX_AUDIT */ /* #undef WITH_IRIX_JOBS */ /* #undef PRNGD_SOCKET */ /* #undef PRNGD_PORT */ #define ENTROPY_TIMEOUT_MSEC 200 #define SSH_PRIVSEP_USER "sshd" /* #undef MANTYPE */ #define HAVE_OPENSSL 1 /* #undef RSAREF */ #define HAVE_STRUCT_TIMEVAL 1 #define HAVE_HOST_IN_UTMP 1 #define HAVE_HOST_IN_UTMPX 1 #define HAVE_ADDR_IN_UTMP 1 #define HAVE_ADDR_IN_UTMPX 1 #define HAVE_ADDR_V6_IN_UTMP 1 #define HAVE_A...

...redstatedir='${prefix}/com' sysconfdir='/etc' target_alias='' user_path='/bin:/usr/sbin:/sbin:/usr/bin' xauth_path='' ## ----------- ## ## confdefs.h. ## ## ----------- ## #define DISABLE_FD_PASSING 1 #define DISABLE_SHADOW 1 #define DISABLE_WTMPX 1 #define ENTROPY_TIMEOUT_MSEC 200 #define GETPGRP_VOID 1 #define GLOB_HAS_ALTDIRFUNC 1 #define HAVE_ADDR_IN_UTMP 1 #define HAVE_ADDR_IN_UTMPX 1 #define HAVE_ASPRINTF 1 #define HAVE_BASENAME 1 #define HAVE_BCOPY 1 #define HAVE_CLOCK 1 #define HAVE_CLOCK_T 1 #define HAVE_CONTROL_IN_MSGHDR 1 #define HAVE_CRYPT_H 1 #define HAVE_CYG...