search for: fwding

Currently, openssh-2.9p2 adds cookies to a user's .Xauthority file if X11 forwarding is requested but does not delete them while closing down the connection. While this may not necessarily be a security vulnerability, but it's a good idea for the application to cleanup appropriately. This patch takes care of removing the X forwarding cookies from the user's .Xauthority file. Please

Hi I have been using pygrub for most of the needs. Was trying out some stuff on SLES 10 SP1. It seems that it does not have pygrub!! On the other hand,they have domUloader.py which requires bootargs="--entry=hda:/boot/vmlinuz...., path to ramdisk. It is quite strange to be asking for the path of the kernel and the ramdisk to be supplied in the conf file!!. Am I missing something

Hi I have been using pygrub for most of the needs. Was trying out some stuff on SLES 10 SP1. It seems that it does not have pygrub!! On the other hand,they have domUloader.py which requires bootargs="--entry=hda:/boot/vmlinuz...., path to ramdisk. It is quite strange to be asking for the path of the kernel and the ramdisk to be supplied in the conf file!!. Am I missing something

...;s v3's fast leave version) are about quickly converging when > a leave is received (e.g. when there are no listeners to quickly remove the mdb). They > don't deal with interface states (IIUC). Why don't you just flush the port's mdb entries > on disconnect? That would stop fwding. > > Cheers, > Nik > >

...me test boxes and it doesn't work. I do a kinit, and then ssh and it asks for a password. If you don't provide one, you don't get in. Also, the config file says that AFS (Andrew File System?) is required for Kerb Ticket Fwding... I'm not quite clear on why this is, and didn't find much in the docs... can anyone shed some light on this, we'd love to have KerbV ticket forwarding. And yes, we compiled OpenSSH with KerbV support....

...HT (as that's v3's fast leave version) are about quickly converging when a leave is received (e.g. when there are no listeners to quickly remove the mdb). They don't deal with interface states (IIUC). Why don't you just flush the port's mdb entries on disconnect? That would stop fwding. Cheers, Nik

Hi Nikolay, I have some query on multicast. When streams running on an STA and STA disconnected due to some reason. So, until the MDB is timed out the stream will be forwarded to the port and in turn to the driver and dropps there as no such STA. So, is the multicast_eht handling this scenario to take any action immediately? If not, can we do this to take quick action to reduce overhead of

...6 Jun 2001, Markus Friedl posted the following to Bugtraq: > this feature [placing the X11 cookie file in /tmp] was inherited > from ossh and the reason was: > 1) if $HOME is on NFS, then the cookie travels unencrypted > over the network, this defeats the purpose of X11-fwding > 2) $HOME/.Xauthority gets polluted with temorary cookies. > however, i'm not sure whether the benefit justifies the complexity, > so this feature could be removed from future OpenSSH versions. Please do not remove this feature. On many of the systems I have to access, I am in...

...-------------------------------------------- AssignedTo|markus at openbsd.org |openssh-unix-dev at mindrot.org Status|ASSIGNED |NEW ------- Additional Comments From markus at openbsd.org 2003-01-26 01:03 ------- i think SIGPIPE can happen in x11-fwding and should not lead to exit(1) ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...hostport instead of forward, the call does not reach asterisk: failure_route[1] { revert_uri(); rewritehostport("69.70.x.x:5060"); t_relay() break(); SER log: 4(11513) ******* IP to IP call ************* 1(11506) ERROR: t_forward_nonack: no branched for fwding 1(11506) ERROR: w_t_relay (failure mode): forwarding failed 3(11512) ******* IP to IP call ************* 2(11509) Bye Is there a way to do append_branch("${EXTEN}@asterisk-box") ? Anyone did it? Reply pls with your config files!!

Hi -- I saw an email on December 26th in the openssh-unix-dev mailing list archived on MARC, indicating that agent forwarding is indeed not working for 2.2, but that it is working for 2.3. That email referred to a user with 2.3 clients and 2.2 server. I am running the 2.3 client AND server and am having a similar problem. The only unusual aspect of my installation is that I'm using port 24

...k to a commercial page.. - sync with sshd_config [sshd.c] - no need for poll.h; from bright at wintelcom.net - log with level log() not fatal() if peer behaves badly. - don't panic if client behaves strange. ok deraadt@ - make no-port-forwarding for RSA keys deny both -L and -R style fwding - delay close() of pty until the pty has been chowned back to root - oops, fix comment, too. - missing xfree() - move XAUTHORITY to subdir. ok dugsong at . fixes debian bug #57907, too. (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907) - register cleanup for pty e...

...k to a commercial page.. - sync with sshd_config [sshd.c] - no need for poll.h; from bright at wintelcom.net - log with level log() not fatal() if peer behaves badly. - don't panic if client behaves strange. ok deraadt@ - make no-port-forwarding for RSA keys deny both -L and -R style fwding - delay close() of pty until the pty has been chowned back to root - oops, fix comment, too. - missing xfree() - move XAUTHORITY to subdir. ok dugsong at . fixes debian bug #57907, too. (http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=57907) - register cleanup for pty e...

When I encounter the problem with TCP port forwarding locking up, I'll see this on the client window (if I haven't invoked ssh with -q): chan_shutdown_read failed for #1/fd6: Transport endpoint is not connected chan_shutdown_read failed for #1/fd6: Transport endpoint is not connected This is with Blowfish encryption. I have to kill and restart the client when this happens. Phil

...the user, source address, port and protocol in a format similar to the authentication success / failure messages; bz#2199 * Added unit and fuzz tests for refactored code. These are run automatically in portable OpenSSH via the "make tests" target. Bugfixes * sshd(8): Fix remote fwding with same listen port but different listen address. * ssh(1): Fix inverted test that caused PKCS#11 keys that were explicitly listed in ssh_config or on the commandline not to be preferred. * ssh-keygen(1): Fix bug in KRL generation: multiple consecutive revoked certificate serial n...

...t? Let me know if you need a PDF copy of the manual -James On Mon, 10 Jan 2005 20:55:13 -0500, Michael Lyszczek <mlyszczek@gmail.com> wrote: > On Mon, 10 Jan 2005 12:51:49 -0500, Michael Lyszczek > <mlyszczek@gmail.com> wrote: > > Anyone have any issues like this....I am fwding broadvoice to zaptel,1 > > with my t100p and the t1 goes to a zhone zplex10b.. I can ring > > extension 1, which is pair 1 of the channel bank, but it doesnt > > recognize offhook and it keeps ringing the phone after I pick up. > > Also, its like each ring is like a seperate...