search for: ounsupport

...in > OpenSSH? This patch looks very promising. However, it doesn't handle the case of ignoring an option that OpenSSH knows about but doesn't support, such as the GSSAPI* options on an installation of OpenSSH that got configured without GSSAPI support. These options have an opcode of oUnsupported. This seems simple enough to fix: change "return keywords[i].opcode;" to: if (ignoreunknown && keywords[i].opcode == oUnsupported) return oIgnored; return keywords[i].opcode; Real-world application of this: I set "GSSAPIAuthentication no" in my ~/.ssh/config, a...

https://bugzilla.mindrot.org/show_bug.cgi?id=2414 Bug ID: 2414 Summary: ControlMaster directive should be ignored on Cygwin Product: Portable OpenSSH Version: -current Hardware: Other OS: Cygwin on NT/2k Status: NEW Severity: enhancement Priority: P5 Component: ssh Assignee:

...04:13 -0000 1.182 +++ readconf.c 11 Jan 2010 22:19:10 -0000 @@ -128,7 +128,7 @@ typedef enum { oSendEnv, oControlPath, oControlMaster, oHashKnownHosts, oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand, oVisualHostKey, oUseRoaming, oZeroKnowledgePasswordAuthentication, - oDeprecated, oUnsupported + oAddKey, oDeprecated, oUnsupported } OpCodes; /* Textual representations of the tokens. */ @@ -232,6 +232,7 @@ static struct { #else { "zeroknowledgepasswordauthentication", oUnsupported }, #endif + { "addkeytoagent", oAddKey }, { NULL, oBadOption } }; @@ -914,6...

...revision 15803) @@ -106,8 +106,9 @@ oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, oAddressFamily, oGssAuthentication, oGssDelegateCreds, oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, - oSendEnv, oControlPath, oControlMaster, oHashKnownHosts, - oDeprecated, oUnsupported + oSendEnv, oControlBindMask, oControlPath, oControlMaster, + oControlAllowUsers, oControlDenyUsers, oControlAllowGroups, + oControlDenyGroups, oHashKnownHosts, oDeprecated, oUnsupported } OpCodes; /* Textual representations of the tokens. */ @@ -195,8 +196,13 @@ { "serveraliveinterval...

...adconf.c.orig Thu Nov 27 18:04:27 2003 +++ readconf.c Thu Nov 27 18:06:49 2003 @@ -105,7 +105,7 @@ oClearAllForwardings, oNoHostAuthenticationForLocalhost, oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, oAddressFamily, oGssAuthentication, oGssDelegateCreds, - oDeprecated, oUnsupported + oGroupPrivateKey, oDeprecated, oUnsupported } OpCodes; /* Textual representations of the tokens. */ @@ -188,6 +188,7 @@ { "rekeylimit", oRekeyLimit }, { "connecttimeout", oConnectTimeout }, { "addressfamily", oAddressFamily }, + { "groupprivatekey&qu...

...it a/readconf.c b/readconf.c index eb4a8b9..9f862a9 100644 --- a/readconf.c +++ b/readconf.c @@ -135,7 +135,7 @@ typedef enum { oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand, oVisualHostKey, oUseRoaming, oZeroKnowledgePasswordAuthentication, oKexAlgorithms, oIPQoS, - oDeprecated, oUnsupported + oDeprecated, oUnsupported, oLocalEnvMod } OpCodes; /* Textual representations of the tokens. */ @@ -245,6 +245,7 @@ static struct { #endif { "kexalgorithms", oKexAlgorithms }, { "ipqos", oIPQoS }, + { "localenvmod", oLocalEnvMod }, { NULL, oBadOption }...

...hms, oIPQoS, oRequestTTY, oIgnoreUnknown, oProxyUseFdpass, oCanonicalDomains, oCanonicalizeHostname, oCanonicalizeMaxDots, - oCanonicalizeFallbackLocal, oCanonicalizePermittedCNAMEs, + oCanonicalizeFallbackLocal, oCanonicalizePermittedCNAMEs, oConnectViaSCTP, oIgnoredUnknownOption, oDeprecated, oUnsupported } OpCodes; @@ -261,6 +261,11 @@ static struct { { "canonicalizehostname", oCanonicalizeHostname }, { "canonicalizemaxdots", oCanonicalizeMaxDots }, { "canonicalizepermittedcnames", oCanonicalizePermittedCNAMEs }, +#ifdef USE_SCTP + { "connectviasctp&quo...

...+ { "transport", oTransport }, +#endif { "port", oPort }, { "cipher", oCipher }, { "ciphers", oCiphers }, The common way to add conditional options is: #ifdef FEATURE { "feature", oFeature }, #else { "feature", oUnsupported }, #endif and adding the oFeature unconditionally to the OpCodes. -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug.

...yHostKeyDNS, oConnectTimeout, oAddressFamily, oGssAuthentication, oGssDelegateCreds, oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, - oSendEnv, oControlPath, oControlMaster, oHashKnownHosts, + oSendEnv, oControlPath, oControlMaster, oControlPersist, oHashKnownHosts, oDeprecated, oUnsupported } OpCodes; @@ -197,6 +197,7 @@ static struct { { "sendenv", oSendEnv }, { "controlpath", oControlPath }, { "controlmaster", oControlMaster }, + { "controlpersist", oControlPersist }, { "hashknownhosts", oHashKnownHosts }, { NULL, oBad...

...000 +0100 +++ openssh-4.3p1-patch/readconf.c 2006-02-04 16:41:10.000000000 +0100 @@ -112,7 +112,7 @@ oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, oSendEnv, oControlPath, oControlMaster, oHashKnownHosts, oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand, - oDeprecated, oUnsupported + oDeprecated, oUnsupported, oOffendingKeyOverride } OpCodes; /* Textual representations of the tokens. */ @@ -175,6 +175,7 @@ { "batchmode", oBatchMode }, { "checkhostip", oCheckHostIP }, { "stricthostkeychecking", oStrictHostKeyChecking }, + { "offen...

...ss, oSmartcardDevice, oClearAllForwardings, oNoHostAuthenticationForLocalhost, oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, - oAddressFamily, oGssAuthentication, oGssDelegateCreds, + oAddressFamily, oGssAuthentication, oGssDelegateCreds, oServerLiesWarning, oDeprecated, oUnsupported } OpCodes; @@ -166,6 +166,7 @@ { "batchmode", oBatchMode }, { "checkhostip", oCheckHostIP }, { "stricthostkeychecking", oStrictHostKeyChecking }, + { "serverlieswarning", oServerLiesWarning }, { "compression", oCompression }, { "...

If I am trying to build OpenSSH 6.6 with Kerberos GSSAPI support, do I still need to get Simon Wilkinson's patches? --- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |

...nd to ignore the notes in manual pages (or manual pages overall) and are wondering "why it does not work" (for example Cipher option [1]). It applies for both client and server config options. There are few ways how to do this, either put the whole options into #ifdef, or make them "oUnsupported". Or create some transition Obsolete warning that would not fail The same end should be given to their description in manual pages, but it would require some pre-processing (not sure about the most clean way). This is quite last missing piece of SSHv1 support in current release. I didn'...

Hello, My usage of ProxyCommand just calls the nc utility with various parameters. That in turn after the initial setup just copies copies the data from the network socket to stdin/stdout. This useless coping can be avoided if ssh has an option to receive the socket from the proxy command. I suppose it can improve network error reporting as ssh would talk directly to the network socket rather

...00 1.3 @@ -107,7 +107,7 @@ oHostKeyAlgorithms, oBindAddress, oSmartcardDevice, oClearAllForwardings, oNoHostAuthenticationForLocalhost, oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, - oAddressFamily, + oAddressFamily, oGssAuthentication, oGssDelegateCreds, oDeprecated, oUnsupported } OpCodes; @@ -142,6 +142,13 @@ { "kerberostgtpassing", oUnsupported }, #endif { "afstokenpassing", oUnsupported }, +#if defined(GSSAPI) + { "gssapiauthentication", oGssAuthentication }, + { "gssapidelegatecredentials", oGssDelegateCreds }, +#else +...

...ableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout, oAddressFamily, oGssAuthentication, oGssDelegateCreds, oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, - oSendEnv, oControlPath, oControlMaster, + oSendEnv, oControlPath, oControlMaster, oPreferAskpass, oDeprecated, oUnsupported } OpCodes; @@ -197,6 +197,7 @@ { "sendenv", oSendEnv }, { "controlpath", oControlPath }, { "controlmaster", oControlMaster }, + { "preferaskpass", oPreferAskpass }, { NULL, oBadOption } }; @@ -774,6 +775,10 @@ intptr = &options->cont...

Hi, (I'm not subscribed to the list, so please CC me on reply.) I'd like to request adding a feature to OpenSSH: Task: ~~~~~ It is quite sometime useful to invoke a program prior to connecting to an ssh server. The most common use case will probably be port knocking. That is a small program sends certain packets to a server and the server reacts to this by unlocking the ssh port, which

Hello! I'm hoping that Gmail won't HTML format this mail so that I'll get flamed :) Anyway, my question relates to ssh_config. The problem I find is that the Host pattern is only applied to the argument given on the command line, as outlined in the man page: "The host is the hostname argument given on the command line (i.e. the name is not converted to a canonicalized host name

...03:46:49 2007 +++ openssh-4.7p1/readconf.c Fri Dec 21 15:40:50 2007 @@ -130,6 +130,7 @@ oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly, oSendEnv, oControlPath, oControlMaster, oHashKnownHosts, oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand, + oFipsMode, oDeprecated, oUnsupported } OpCodes; @@ -226,6 +227,7 @@ { "tunneldevice", oTunnelDevice }, { "localcommand", oLocalCommand }, { "permitlocalcommand", oPermitLocalCommand }, + { "fipsmode", oFipsMode}, { NULL, oBadOption } }; @@ -915,6 +917,10 @@ intptr = &optio...