search for: gert

Hi Gert, Thanks for your reply. But we can't upgrade to 7.2 version also we don't have plan to upgrade in near future. Can I fix these vulnerabilities in the current version? Regards Abhishek On Tue, Mar 8, 2016 at 6:42 PM, Gert Doering <gert at greenie.muc.de> wrote: > Hi, > >...

Hi, On Tue, Oct 17, 2017 at 05:54:52AM -0600, The Doctor wrote: > The best solution is if (LIBRESSL) || (OPENSSL < 1010...) > > Else > > Whatever. > > Is that too much work? Littering code with #ifdef is almost never a good idea. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at greenie.muc.de fax: +49-89-35655025 gert at net.informatik.tu-muenchen.de

I noticed that AIX now comes with a version of zlib installed in /usr. (I'm working on 5.2) My first inclination was to simply uninstall it and use the one we compile (and put in /usr/local). However, IBM has made zlib part of the RPM package itself! So, I cannot uninstall it without removing RPM.... Next, I tried passing --with-zlib=/usr/local to configure for ssh. This seems to work, but

...s the correct thing.? Sorry ?didn't give the use case clearly.? I'm talking about the use of tilde inside client config. ?The example was to illustrate desired behavior. Ssh itself does not eval tilde with any consideration for environment. That is the problem.? ? Original Message ? From: Gert Doering Sent: Friday, May 19, 2017 02:19 To: matthew patton Cc: openssh-unix-dev at mindrot.org Subject: Re: feature request: use HOME before getpwnam() in misc.c Hi, On Thu, May 18, 2017 at 09:51:04PM +0000, matthew patton wrote: > What is the use case? > > HOME=longpath_to_config1 &gt...

As I understand currently there is no way in sshd_config to match based on the client public key so different configuration for the same username can be applied depending on the key, right? My case is a backup login that needs to run as a root to access all the files and where I want to use ForceCommand to allow the login only to execute a particular command and yet still allow normal root

All, When logging into an HP-UX 10.2 system from a Windows NT machine running Cygwin and openssh 2.9p2, control-c sends a sigint to the ssh client on the NT system, thus killing the ssh process. Interestingly enough, this behavior is only observed when using X11 forwarding. I can eliminate the behavior by changing clientloop.c to ignore SIGINT (signal(SIGINT, SIG_IGN) ) but then I'm bak to

I would like to implement an arbitrary script to be executed when logging on via SSH. This is supposedly possible using the ForceCommand option to sshd. However, as soon as I implement any script, even as simple as echoing a string, clients can no longer connect to the server. Clients report only that the connection was dropped by the server. The server, in debug mode, shows: Feb 17 16:14:01

Hi there, Does anyone have the experience of access/control each pins of printer port by calling 3rd party dll file? It works well on windows XP/2000 O.S. but seems have no function under wine (I installed 1.0.1) Any reply will be high appreciation ! Thank you.

Gert, Thank you for the feedback. Can you give any further direction on where to get more information on what you are describing? On Wed, Feb 17, 2016 at 3:17 PM, Gert Doering <gert at greenie.muc.de> wrote: > Hi, > > On Wed, Feb 17, 2016 at 12:59:57PM -0600, Lesley Kimmel wrote: >...

...O, older SVR3 systems) or that might have problems with anonymous shared mmap() (don't have an examples, but e.g. the INN docs are full of warnings concerning mmap()). So I want to ask you to make the PrivSep stuff compile-time configurable, to enable building on "legacy" platforms. gert PS: my SCO 3 fix for the suid problem seems to have been lost, I'll resubmit via bugzilla. -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at green...

...s to overwrite *that* memory location. A quick fix is appended below: if a host key file can't be read, host_keys[i] is set to NULL. This does not seem to have adverse effects, and the core dumps go away. The patch is off by a few lines due to other changes (debugging added to track this). gert Index: sshd.c =================================================================== RCS file: /cvs/openssh_cvs/sshd.c,v retrieving revision 1.101 diff -u -r1.101 sshd.c --- sshd.c 2000/12/15 23:31:01 1.101 +++ sshd.c 2000/12/22 14:56:29 @@ -702,6 +706,7 @@ if (key == NULL) { error("Co...

...the #include <login.h> statement at top of auth.c includes "./login.c" due to the -I. line. Why do we need -I. ? Shouldn't those things be included with #include "something.h", as opposed to #include <something.h>? Should we rename ./login.h to ssh-login.h? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at greenie.muc.de fax: +49-89-35655025 gert.doering at physik.tu-muenchen.de

it's really^3 annoying that no matter the value of $HOME, that tilde_expand_filename() only looks at getpwnam() and friends instead of at least trying getenv("HOME"). What is the use case? HOME=longpath_to_config1 ssh -i ~/.ssh/key1 HOME=longpath_to_config2 ssh -i ~/.ssh/key2 but getpwnam() defeats this by always accessing what's in the passwd file. So .ssh/known_hosts is

...us Friedl) > 5. scp bug? or is it intended? (Lapo Luchini) > 6. Re: OpenSSH 3.4p1 hostbased auth - howto? (Tim Rice) > 7. Re: scp bug? or is it intended? (Ben Lindstrom) > 8. pam problems with securid patch (Edward Quick) > 9. Re: OpenSSH 3.4p1 hostbased auth - howto? (Gert Doering) > 10. Re: OpenSSH 3.4p1 hostbased auth - howto? (Gert Doering) > 11. Re: privilege separation breaks dns lookups (Gert Doering) > 12. Re: OpenSSH 3.4p1 hostbased auth - howto? (Tony Finch) > 13. [Bug 369] New: Inconsistant exiit status from scp > (bugzilla-daemon at...

...e another external dependency (and one that updates quite frequently to the great joy of admins everywhere) just to paint some visual sugar which works about as well in ASCII... ... wtf? The whole idea of using UTF8 in a single place inside OpenSSH just for eye candy needs to be burnt in flames. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at greenie.muc.de fax: +49-89-35655025 gert at net.informatik.tu-muenchen.de

On Sun, Jun 30, 2013 at 7:42 AM, Gene Cumm <gene.cumm at gmail.com> wrote: > On Sun, Jun 30, 2013 at 1:12 AM, Gert Cuykens <gert.cuykens at gmail.com> wrote: >> Could it be that syslinux is waiting for ever if you use serial mode? >> >> SERIAL 0 115200 > >> TIMEOUT 300 > > Gert, Romain: Have you tried lowering the serial rate or timeout? ie: > > SERIAL 0 9600 > T...

Gert Cuykens wrote: > On Fri, Jun 28, 2013 at 2:41 AM, Gert Cuykens <gert.cuykens at gmail.com> wrote: >> On Fri, Jun 28, 2013 at 2:31 AM, Gene Cumm <gene.cumm at gmail.com> wrote: >>> On Thu, Jun 27, 2013 at 6:03 PM, Gert Cuykens <gert.cuykens at gmail.com> wrote: &g...

On Fri, Jun 28, 2013 at 2:31 AM, Gene Cumm <gene.cumm at gmail.com> wrote: > On Thu, Jun 27, 2013 at 6:03 PM, Gert Cuykens <gert.cuykens at gmail.com> wrote: >> Using syslinux 6.01-pre4 and ubuntu 13.10 kernel 32bit >> >> LABEL halt >> com32 poweroff.c32 >> >> Does not power off my qemu, it stays open in halt mode. >> qemu -cdrom ubuntu.iso -boot d -net nic,mode...

Hi All, Actually I am working with the OpenSSH version 6.2p which is vulnerable to above mentioned vulnerabilities. So am looking for some help how I can fix these vulnerabilities in my version. I need to fix it in the OpenSSH code. Regards Abhishek

Hi! I got the following error at ./configure: configure: error: cannot find sources (ssh.c) in . or .. Some Details around...: Code-Version: openssh-4.3p2 System: Ubuntu 7.04 * zlib und ssh-devel packages installed. I'm sure someone of you knows how i can fix that problem... :) greets! Christofer