search for: prng_seed

..., using rhosts authentication, entropy.c drops the privs in prng_write_seedfile() at the setuid(original_uid) line (line 550, approx): void prng_write_seedfile(void) { int fd; char seed[1024]; char filename[1024]; struct passwd *pw; /* Don't bother if we have already saved a seed */ if (prng_seed_saved) return; setuid(original_uid); /* ^^^^^^^^^^^^^^^^^^^^ ***HERE*** */ prng_seed_saved = 1; pw = getpwuid(original_uid); if (pw == NULL) fatal("Couldn't get password entry for current user (%i): %s", original_uid, strerror(errno)); /* Try to ensure...

...even though configured with "X11Forwarding yes" [have not looked into it as of now] openssh client -> openssh-server [Proto 2]: does not work. serv01 111: /usr/local/openssh/bin/ssh -2 -p 24 serv01 PRNG seedfile /home/aet/serv01/jaenicke/.ssh/prng_seed must be mode 0600, owned by uid 11019 serv01 112: ls -al ~/.ssh/prng_seed -rw------- 1 jaenicke aet 1024 May 10 11:26 /home/aet/serv01/jaenicke/.ssh/prng_seed [my $HOME and $HOME/.ssh are 700, too] [Also no debugging until now] - Please note...

http://bugzilla.mindrot.org/show_bug.cgi?id=968 Summary: OpenSSH 3.8p1 PRNG seed extraction failed error Product: Portable OpenSSH Version: 3.8p1 Platform: UltraSparc OS/Version: SunOS Status: NEW Severity: major Priority: P2 Component: scp AssignedTo: openssh-bugs at mindrot.org

Hi I built openssh on solaris 2.6 after running configure --prefix=/my/install/dir --with-ssl-dir=/where/ssl/is Everything compiled Ok but there was a problem when doing make install, as ssh-rand-helper was looking in the wrong place for prng_command_file, so here is a patch for ssh-rand-helper.c. You need to delete a space before the string. 63c63 < # define SSH_PRNG_COMMAND_FILE

...debug1: done: KEX2. debug1: send SSH2_MSG_SERVICE_REQUEST 42 71 58 e0 7b e7 3b 4f 0d 3d 83 9c a2 01 c6 22 Disconnecting: Bad packet length 1114724576. <------------ ERROR debug1: Calling cleanup 0x400102a2(0x0) debug1: Calling cleanup 0x400102aa(0x0) debug1: writing PRNG seed to file //.ssh/prng_seed Other info: - Going from box running 2.3.0p1 to box with 2.5.2p2 works fine with protocol 2. - 2.5.2p2 box to another 2.5.2p2 box works fine. Workarounds: 1) upgrade offending machine to 2.5.2p2, although I can't for all machines. 2) (Interim fix) connect to offending machine with protocol ve...

...system calls debug: Encryption type: 3des debug: Sent encrypted session key. debug: Installing crc compensation attack detector. debug: Received encrypted confirmation. Permission denied. debug: Calling cleanup 0x3d6c8(0x0) debug: Calling cleanup 0x3ffb8(0x0) debug: writing PRNG seed to file //.ssh/prng_seed

...bug: Seeded RNG with 35 bytes from programs debug: Seeded RNG with 3 bytes from system calls respond_to_rsa_challenge: public_key 895 < host_key 768 + SSH_KEY_BITS_RESERVED 128 debug: Calling cleanup 0x3a08c(0x0) debug: Calling cleanup 0x3f4b0(0x0) debug: writing PRNG seed to file /home1/sa/.ssh/prng_seed

...alls debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: ssh_connect: getuid 1001 geteuid 1001 anon 1 debug1: Trying again... debug1: Trying again... debug1: Trying again... Secure connection to bigw.org refused. debug1: writing PRNG seed to file /Users/soren/.ssh/prng_seed boris:~/src=> telnet bigw.org 22 Trying 128.2.156.111... Connected to bigw.org. Escape character is '^]'. <there is a pause before this comes out>SSH-1.5-1.2.27 ^] telnet> q Connection closed. boris:~/src=> ssh bigw.org # see ssh work b/c the server is awake? sspies at bi...

...tc/ssh_prng_cmds debug: Seeding random number generator. debug: OpenSSL random status is now 0 debug: 3 bytes from system calls debug: Command 'arp -a -n' timed out debug: 31 bytes from programs debug: OpenSSL random status is now 1 debug: loading PRNG seed from file /export/home/joe/.ssh/prng_seed debug: send KEXINIT debug: done debug: wait KEXINIT debug: got kexinit: diffie-hellman-group1-sha1 debug: got kexinit: ssh-dss debug: got kexinit: blowfish-cbc debug: got kexinit: blowfish-cbc debug: got kexinit: hmac-md5,md5-8,none debug: got kexinit: hmac-md5,md5-8,none debug: got kexinit: none,z...

...ing: raw data 199, compressed 192, factor 0.96 Disconnecting: Command terminated on signal 11. debug1: Calling cleanup 0x8054864(0x80e8088) debug1: pty_cleanup_proc: /dev/ttyp1 debug1: Calling cleanup 0x8060fd8(0x0) debug1: Calling cleanup 0x8065bf0(0x0) debug1: writing PRNG seed to file /root/.ssh/prng_seed _____________________________________________________________________________ http://movies.yahoo.com.au - Yahoo! Movies - Now showing: Dude Where's My Car, The Wedding Planner, Traffic..

Hello, I have encountered a problem using ssh-2.1.1p1 on HP-UX 11.00: Everything else seems to work but running scp results in processes staying open: On the server there are 2 processes still running after copying a file: "scp -v -t /tmp" and one sshd. On the client also a ssh-process stays running until killing one of the processes manually... The copying works fine however.

...x60450(0x0) debug1: Calling cleanup 0x520f8(0x179318) debug1: pty_cleanup_proc: /dev/pts/10 debug1: Calling cleanup 0x47bd0(0x0) debug1: Cannot delete credentials[7]: Permission denied debug1: Calling cleanup 0x6fff8(0x0) debug1: Calling cleanup 0x7b100(0x0) debug1: writing PRNG seed to file //.ssh/prng_seed -------------- next part -------------- $ ssh -v -p 222 suntest2 SSH Version 1.2.27 (AFS/KRB.p1, LRZ) [sparc-sun-solaris2.5.1], protocol version 1.5. Standard version. Does not use RSAREF. wsc33: Reading configuration data /afs/lrz/home/a/a2822ab/.ssh/config wsc33: Applying options for * wsc33: Re...

...0 msec debug: Got 0.87 bytes of entropy from 'tail -200 /var/adm/messages' debug: Time elapsed: 0 msec debug: Got 0.00 bytes of entropy from 'tail -200 /var/adm/syslog' debug: 27 bytes from programs debug: OpenSSL random status is now 1 debug: loading PRNG seed from file /root/.ssh/prng_seed debug: Allocated local port 784. debug: Connection established. debug: Remote protocol version 1.99, remote software version OpenSSH-2.1 Enabling compatibility mode for protocol 2.0 debug: Local version string SSH-2.0-OpenSSH-2.1 debug: send KEXINIT debug: done debug: wait KEXINIT debug: got kexini...

...et integrity error (46 != 42) at session.c:358 Disconnecting: Packet integrity error. (34) debug1: Calling cleanup 0x2000175c(0x2000aee0) debug1: pty_cleanup_proc: /dev/pts/7 debug1: Calling cleanup 0x200016c0(0x0) debug1: Calling cleanup 0x2000139c(0x0) debug1: writing PRNG seed to file /root/.ssh/prng_seed If this is a client issue, then please let me know and I will chase Van Dyke for a resolution. Disabling X11 forwarding and/or moving to ssh2 fixes the problem. Many thanks, -------------------------------------------------------- Doug Manton, AT&T EMEA Commercial Security Solutions...

...The following connections are open: #0 client-session (t4 r0 i8/0 o128/0 fd -1/-1) debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 0.0 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0 debug1: Exit status 127 debug1: writing PRNG seed to file /export/home/jpaint/.ssh/prng_seed Connection closed

.... debug: Seeded RNG with 31 bytes from programs debug: Seeded RNG with 3 bytes from system calls rsa_public_encrypt() exponent too small or not odd debug: Calling cleanup 0x1003cb88(0x0) debug: Calling cleanup 0x1003bd78(0x0) debug: writing PRNG seed to file /afs/isis.unc.edu/home/b/b/bbiswas/.ssh/prng_seed ============================================ We can't completely convert to openssh at UNC until this problem is solved (obviously!). Thanks for any help you can give. --Brian Biswas Academic technology & Networks

...in. Why is it that on systems with no /dev/random or PRNGD or EGD (and I have a lot of Solaris systems in this situation because I don't have root access on them) that the OpenSSH 'ssh' command has to run through all those ssh_prng_cmds every time it starts up? Why doesn't ~/.ssh/prng_seed give it enough initial entropy? The old SSH 1.2.27 'ssh' command got away with using only ~/.ssh/random_seed, which it initializes by running a lot of system commands the first time it is run. Was that not secure enough? I don't recall seeing anybody claiming it wasn't. I can...

...ebug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: restore_uid debug1: ssh_connect: getuid 501 geteuid 501 anon 1 scp: bison-1.28.tar.gz: no address associated with hostname. debug1: Calling cleanup 0x4000b102(0x0) debug1: writing PRNG seed to file /home/dilly/.ssh/prng_seed dilly at gauss:~/src$ -- Jeff Layton (jtlayton at bigfoot.com) "Down that path lies madness. On the other hand, the road to hell is paved with melting snowballs." -- Larry Wall

...the server. Please help. Here is the exact error: # /usr/local/bin/ssh-keyscan -v miad_1 # miad_1 SSH-2.0-OpenSSH_3.0.2p1 xmalloc: out of memory (allocating 1349676920 bytes) debug1: Calling cleanup 0x4000b7b2(0x0) debug1: Calling cleanup 0x4000b7da(0x0) debug1: writing PRNG seed to file //.ssh/prng_seed # Thank you in advance. -Dat Truong __________________________________________________ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/

...-200 /var/log/syslog' timed out debug: Command 'tail -200 /var/adm/messages' timed out debug: Seeded RNG with 8 bytes from programs debug: Seeded RNG with 3 bytes from system calls Not enough entropy in RNG debug: Calling cleanup 0x4b530(0x0) debug: writing PRNG seed to file ~user/.ssh/prng_seed --------------------------------------------------------------------- To unsubscribe, e-mail: secureshell-unsubscribe at securityfocus.com For additional commands, e-mail: secureshell-help at securityfocus.com