search for: skey

If I configure openssh-2.1.1p4 with the --with-skey option on a Redhat Linux 6.2 system which has openssl-0.9.5a and skey (the logdaemon 6.2 version) installed, the compile fails with the following errors: auth1.c: In function `do_authloop': auth1.c:331: warning: implicit declaration of function `skey_keyinfo' auth1.c:331: warning: initiali...

Hi, I need to setup OpenSSH on a AIX host with skey support. I have search this mailing list archive and try all incarnation of skey lib, but couldn't get openssh to compile with skey support on a non openbsd system without pam support. Even on my Linux box, I can't get it to compile. Could someone give me an URL of a ready to compile skey...

Hi! There is a situation when sshd will crash, but it might be rather hard to reproduce. I'll try to explain the setup :) S/KEY is compiled and installed (taken from http://www.sparc.spb.su/solaris/skey/ ) on Linux box (kernel 2.4.0). Then, OpenSSH 2.3.0p1 is compiled with skey support. It all works fine (patch has been applied too, which fixes skey issue found in November). Now, for the sake of testing, I have created an skey entry for the user which doesn't have an account on the system. Li...

I'm trying to compile skey support into our OpenSSH distro and it's failing to configure. It complains about missing libraries. I downloaded and compiled the latest skey-1.1 and installed it into /usr/local. I tried using --with-skey=/usr/local, --with-skey=/usr/local/lib, --with-skey=/usr/local/include and --with-ske...

I am having difficulties compiling the Linux/Unix port of openssh --with-skey. Is it supported? -- Charles Arsenault <charlesa at gi4s.qc.ca> Tel: +1-514-575-8140 D011 DEC9 E226 D928 8F84 3257 8908 4865 744D 1654

Hi, if i add --with-tcp-wrappers and --with-skey and don't have an skey-library installed configure will fail with a message telling me that I don't have libwrap installed. But after looking into config.log I see the following: |configure:6344: checking for libwrap |configure:6356: gcc -o conftest -g -O2 -Wall -I. -I. conftest.c -ldl -...

...cconfig.h --- org/openssh-2.5.2p2/acconfig.h Sat Mar 17 02:15:38 2001 +++ openssh-2.5.2p2/acconfig.h Sun Jun 3 18:36:47 2001 @@ -184,6 +184,9 @@ /* Define if you want AFS support */ #undef AFS +/* Define if you want OPIE support */ +#undef OPIE + /* Define if you want S/Key support */ #undef SKEY diff -wur org/openssh-2.5.2p2/auth-chall.c openssh-2.5.2p2/auth-chall.c --- org/openssh-2.5.2p2/auth-chall.c Mon Mar 5 07:59:27 2001 +++ openssh-2.5.2p2/auth-chall.c Sun Jun 3 18:34:43 2001 @@ -67,7 +67,7 @@ debug("verify_response: <%s> = <%d>", response, authok); retu...

...inary, but I'm not sure if this is possible with a commandline option to make. I would like to rebuild it in the usual way: # cd /usr/src/secure/usr.sbin/sshd # make obj && make depend && make all install but somehow define OPIE or, I think, include the configure option --with-skey=PATH, or both. Can this be achieved within the regular system build process, or must I roll my own? thanks, joel -- Joel Hatton -- Security Analyst | Hotline: +61 7 3365 4417 AusCERT - Australia's national CERT | Fax: +61 7 3365 7031 The University of Queensland...

Hi, Fist of all thanks for all the work you put into gluster this product is fantastic. In our setup, we have to have some kind of nfs authentication. Not beeing able to set the rpc-auth option using the cli was a big draw-back for us. Setting the option auth.allow only set the gluster auth.addr.allow option in the bricks themselves but did not do any good regarding nfs access. Setting the

Hi, On Red Hat Linux 7.2, it appears one cannot compile with --with-skey; configure fails with: checking for skey_keyinfo... no configure: error: ** Incomplete or missing s/key libraries. even though skey 1.1.5 libraries are installed from the location mentioned in INSTALL. This has also happened with Solaris it seems: http://bugzilla.mindrot.org/show_bug.cgi?id=45...

http://bugzilla.mindrot.org/show_bug.cgi?id=45 ------- Additional Comments From tim at multitalents.net 2002-01-31 16:37 ------- Autoconf uses char (*f) (); in all it's AC_CHECK_FUNC tests. Seems like skey should be fixed. Feel free to provide a patch to autoconf.ac that uses AC_TRY_RUN instead of AC_CHECK_FUNC(skey_keyinfo, ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

Hi, We at BalaBit IT Security Ltd developed a patch against openssh 2.3.0p1 to support TIS authserv authentication. TIS authserv uses a simple protocol, and supports CryptoCard, SKey, password etc. authentication. The commercial versions of SSH support this protocol, OpenSSH implemented SKey on its own using the protocol primitives originally invented for TIS authentication. Our patch is an alternative to S/Key support in OpenSSH, the two cannot be compiled in at the same tim...

...rather than libc. OpenSSL does not have SHA1_End but since it is used only for generating fake challenges, the impact of changing it to SHA1_Final should be small. A more general solution would be to have configure.in test for sha1.h, openssl/sha.h, and SHA1_End. configure.in should also add auth-skey.o to SSHDOBJS in Makefile if S/Key is enabled; my patch below does not cover those issues. Perhaps another time. If any GNU/Linux admins want to play with S/Key, I have some patches on the OpenBSD versions at http://ftp.m.org.nz/users/cky/patches/skey/ (or, of course, ftp://...). Enjoy! ---Chris...

...4 OS: Linux Status: NEW Severity: normal Priority: P5 Component: sshd Assignee: unassigned-bugs at mindrot.org Reporter: kmk at sanitarium.net If I put in sshd_config: UsePAM yes AuthenticationMethods keyboard-interactive:skey,keyboard-interactive:pam ChallengeResponseAuthentication yes (PasswordAuthentication yes or no doesn't matter) I would expect to be prompted for an s/key challenge then whatever is supported by pam. The intention is to make pam require google authenticator but I have tried this with Gentoo...

...9; on my DC produces this: Ticket cache: FILE:/tmp/dhcp-dyndns.cc Default principal: dhcpduser at SAMDOM.EXAMPLE.COM Valid starting Expires Service principal 11/01/19 10:12:50 11/01/19 20:12:50 krbtgt/SAMDOM.EXAMPLE.COM at SAMDOM.EXAMPLE.COM renew until 12/01/19 10:12:50, Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 11/01/19 10:12:50 11/01/19 20:12:50 DNS/dc4.samdom.example.com at SAMDOM.EXAMPLE.COM renew until 12/01/19 10:12:50, Etype (skey, tkt): arcfour-hmac, arcfour-hmac And running 'ktutil' produces this: root at dc4:~# ktutil ktutil:...

...dconf.o clientloop.o -SSHDOBJS= sshd.o auth.o auth1.o auth2.o auth-chall.o auth2-chall.o auth-rhosts.o auth-options.o auth-krb4.o auth-pam.o auth2-pam.o auth-passwd.o auth-rsa.o auth-rh-rsa.o auth-sia.o sshpty.o sshlogin.o loginrec.o servconf.o serverloop.o md5crypt.o session.o groupaccess.o auth-skey.o auth-bsdauth.o +SSHDOBJS= sshd.o auth.o auth1.o auth2.o auth-chall.o auth2-chall.o auth-rhosts.o auth-options.o auth-krb4.o auth-pam.o auth2-pam.o auth-passwd.o auth-rsa.o auth-rh-rsa.o auth-sia.o sshpty.o sshlogin.o loginrec.o servconf.o serverloop.o md5crypt.o session.o groupaccess.o auth-skey....

...<adrian at merlin.keble.ox.ac.uk> - Merged more OpenBSD changes: - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c] move atomicio into it's own file. wrap all socket write()s which were doing write(sock, buf, len) != len, with atomicio() calls. - [auth-skey.c] fd leak - [authfile.c] properly name fd variable - [channels.c] display great hatred towards strcpy - [pty.c pty.h sshd.c] use openpty() if it exists (it does on BSD4_4) - [tildexpand.c] check for ~ expansion past MAXPATHLEN - Modified helper.c to use new at...

...L, saved_argc, saved_argv, get_canonical_hostname(), pw->pw_name, NULL, 0, NULL, diff -urN -x *~ openssh-2.1.1p4/auth2.c openssh-2.1.1p4-hein/auth2.c --- openssh-2.1.1p4/auth2.c Tue Jul 11 09:31:38 2000 +++ openssh-2.1.1p4-hein/auth2.c Sun Aug 27 17:39:22 2000 @@ -102,6 +102,9 @@ #ifdef SKEY options.skey_authentication = 0; #endif +#ifdef PAM_TIS + options.tis_authentication = 0; +#endif #ifdef KRB4 options.kerberos_authentication = 0; #endif @@ -257,7 +260,7 @@ packet_done(); #ifdef USE_PAM - return auth_pam_password(pw, ""); + return auth_pam_password(pw,...

...nSSH with S/Key support. My System: SuSE Linux v6.3 (Kernel: 2.2.13) egcs-2.91.66 OpenSSL 0.9.5a S/Key 1.1 OpenSSH v1.2.3 / v2.0.0beta1 (error occurs in both versions) When I tried to configure (v2.0.0beta1 as an example) as follows: CFLAGS="-I/usr/local/openssl-0.9.5a/include -I/usr/local/skey-1.1/include" LDFLAGS="-L/usr/local/openssl-0.9.5a/lib -L/usr/local/skey-1.1/lib" ./configure --prefix=/usr/local/openssh-2.0.0beta1 --sysconfdir=/usr/local/openssh-2.0.0beta1/etc --with-ssl-dir=/usr/local/openssl-0.9.5a/lib --with-skey...

Hi, the openssh_cvs Makefile includes the following rules: $(LIBSSH_OBJS): config.h $(LIBOPENBSD_COMPAT_OBJS): config.h but no equivalent for $(LIBSSHD_OBJS) - is this desired or an oversigt? In my case, I built the sshd, tested it, reconfigured with SKEY support, rebuilt (just running "make", no "make clean"), and tracked down the non-working s/key for a while before I noticed that servconf.o hadn't been rebuilt, thus the server still had no skey... gert -- USENET is *not* the non-clickable part of WWW!...