search for: rchit

Greetings - I don't think this is a bug; just something I don't understand. I'm using RedHat Linux v7.0 with an i686 processor. I've been using openssl v0.9.5a with openssh v2.2.1 I've upgraded to openssl v0.9.6b and openssh v2.9.p2 I've built both packages with the '--prefix=/usr' option. During the openssh 'make install' at 'host-key' I get

I have access to three machines: A: Mandrake 7.0, OpenSSH 2.1.1. B: Mandrake 5.3, SSH 1.2.27. C: Mandrake 6.1, OpenSSH 2.1.1. I can get from A to B, or B to A, without a password, but I cannot get from A or B to C without a password. sshd_config is identical on A and C. My public key is in authorized_keys on C, and all files in .ssh and .ssh itself have mode 600 and 700 respectively. C is behind

Dear OpenSSH gurus! ;-) I recently upgraded from "OpenSSH 2.1.1p4" to "OpenSSH 2.3.0p1" on my Linux 2.2.17 box with OpenSSL 0.9.5a (RedHat 7.0). According to the "ChangeLog", there was a change in SIGPIPE handling: | 20000930 | [...] | - (djm) Ignore SIGPIPEs from serverloop to child. Fixes crashes with | very short lived X connections. Bug report from

After upgrading my client with 2.4p1, I started getting the folowing errors when using slogin to login to a server: 2f 75 73 72 2f 6c 6f 63 Disconnecting: Bad packet length 796226418. Thinking it was the 2.4 upgrade, I uninstalled 2.4 and reinstalled 2.3 client. Problem still exists. I have OpenSSH 2.3 installed as the server. I even deleted the key entry on the client side by editing the

Hi, here's a proposal of a new ssh/scp-feature: ------------------------------------------------------- please implement a timeout with non-zero error-returncode on "Are you sure you want to continue connecting (yes/no)?" ------------------------------------------------------- My situation: recently I have implemented a cronjob that is using scp. Due to organizational

...require ssh-agent. Useful in non-interactive scripts (you don't want a any questions blocking your script). It also supresses the "host key not found, are you sure you want to continue connecting?" question. (basically fails instead unless some conf variable is set to ignore it). -rchit -----Original Message----- From: woods at weird.com [mailto:woods at weird.com] Sent: Tuesday, February 19, 2002 4:07 PM To: dat truong Cc: openssh-unix-dev at mindrot.org; secureshell at securityfocus.com Subject: Re: purpose of scp -B? [ On Monday, February 18, 2002 at 13:02:35 (-0800), dat tr...

...s this server program which uses the "trusted" key. My question is, is it possible for a smart, evil man given the the trusted key and the source of the client program to circumvent the /etc/passwd shell and bypass my server program (assuming that the server program has no bugs in it)? -rchit

Hello, rpm's for 6.2 also did not work here. ( With latest rpm, openssl,...) Compiling myself the binaries did not give any error and working fine. De Munter Erwin -----Original Message----- From: Damien Miller [mailto:djm at mindrot.org] Sent: Monday, March 05, 2001 11:56 PM To: Marco Fioretti Cc: openssh-unix-dev at mindrot.org; marco.fioretti at tiscalinet.it Subject: Re: SSH RPM for Red

Hi, I must access several hosts through reverse masquerading gateways which are visible on the Internet under a single IP address, with different ports (2, 22, 222, 2222 etc..) forwarding to port 22 of various internal ssh servers, each with its own hostkey. This setup totally confuses the openssh client because it does not store the port numbers in the known_hosts* file, and thus falsely

I have a couple of questions regarding openssh.spec and the rpm that gets generated from it. I am using 2.3.0p1 1. Why is openssl a prereq? openssh statically links to openssl during build by default (rightfully so, you don't want your security library a shared object if possible) 2. I don't understand the following line in the spec file during the install step (it makes it not build for

just wondering about this. i noticed "make install" installs ssh-keyscan group-writable. is this intentional? openssh-2.5.2p2/Makefile.in, line 168: $(INSTALL) -m 0775 -s ssh-keyscan $(DESTDIR)$(bindir)/ssh-keyscan chris -- Christopher Linn, <celinn at mtu.edu> | By no means shall either the CEC Staff System Administrator | or MTU be held in any way liable

...t the server side, it thought the client disconnected. Anyways, did anyone else ever encounter this problem (so i can confirm that it isn't my hallucination)? (i'll probably go back to using datafellows ssh). BTW, i am not a member of this list, so please cc any responses to me. thanx. -rchit

I'm not sure if this is useful to anyone else, but around here people are insisting we use key-ed authentication with windows clients and Unix servers over SSH protocol version 2. I couldn't find a free windows client that would meet those requirements. The closest was PuTTY, but it would only use password authentication with SSH2. In the end, this means we will probably have to go with

I would like ssh to have the command line option of supplying the passphrase. This would make it possible to do attendant free scp transfers from PHP, for example. As it is, it is impossible to use a web script to initiate an scp xfer if an encrypted private key is used. I realize that stupid people could make shell scripts or web scripts then with the pass phrase in them, but those same stupid

...omething, i dunno -- other posts may be clearer on this). I hope I'm not just stating the obvious, and hope this clears things up. If I'm wrong about the behaviours, let me know. I really think we should figure out what the correct behaviour should be before trying to come up with a fix. -rchit -----Original Message----- From: Michael [mailto:michael at bizsystems.com] Sent: Monday, December 10, 2001 1:23 PM To: openssh-unix-dev at mindrot.org Subject: Re: hang on exit bug under Linux > On Mon, Dec 10, 2001 at 10:50:06AM -0800, Dan Kaminsky wrote: > > Look: ssh user at host &q...

...(last i checked), and i was wondering whether someone wrote a program to do that already. If not, i'll see if its feasable for me to do it myself (and also whether i will get into any legal issues by doing this). (yes i know i can set my ssh_configs so that they only use protocol 2) Thanx! -rchit ------------------------------------------- Output: (note that i changed the port number of communication) Server: debug1: sshd version OpenSSH_2.3.0p1 debug1: Seeding random number generator debug1: read DSA private key done debug1: Seeding random number generator debug1: Bind to port 19635 on...

The command "ssh ls -l /doesnotexist" gives various responses: Running from a 200 MHz PentiumPro with dsa key added to ssh-agent: Mistakes worst to fast machine: To a faster 600 MHz dual processor i686 600 MHz machine: ls: /doesnotexist: No such file or directory -- correct nothing at all -- wrong ls: select: Bad file descriptor -- wrong

OK, with openssh-SNAP-20001218 I still have the problem of a hanging ssh when running (one specific) command on a server. On the server side, there's a small suid C prog (/usr/dh/mgmt/HupServer) that runs system "/usr/local/apache/bin/apachectl stop/start". Incidentally, apachectl is a shell script, hence the need for a suid wrapper for non-root users... On the client side,

The hang on exit has become quite an issue in my organization(Sun and HP hosts). I see this note in the changelog which indicates that there will not be a fix for this problem: 20001129 - (djm) Back out all the serverloop.c hacks. sshd will now hang again if there are background children with open fds. Also, I am aware of the workaround as noted in the FAQ. However this workaround is not

I am running OpenSSH 2.9p1 on SunOS 5.7 w/4-24-2001 patch cluster. Like many other users I am seeing the hanging session on logout with background processes. This is a huge problem for me as I centrally manage 50+ machines with rdist across ssh. Instead of just complaining about the problem I thought I would put my CS degree to use and try to track down the problem myself. For starters,