search for: ssh_prng_cmds

http://bugzilla.mindrot.org/show_bug.cgi?id=318 ------- Additional Comments From dtucker at zip.com.au 2003-05-04 19:12 ------- Does anyone see any problems with the patch id #186? It seems OK to me. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=318 Summary: Install failure creating ssh_prng_cmds Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org Reporte...

Hi there, I have all my additional software mounted from one central place. Therefore I'm trying to limit all unnecessary local files. Local config files are ok... e.g. keys, ssh_config etc, but why needs ssh_prng_cmds to be in /etc? So why not put it into $bindir? There are no problems doing this with a few manual fixes. So are there any security concerns? Is it possible to make this a configuration option in the furure? Best regards, Armin

Gidday, I've just tried installing openssh-2.2.0p1 and found that it globbers my ssh_prng_cmds file which has been customised from the normally installed one. On BSDi 4.0.1 it doesn't detect enough commands for ssh-keygen to be happy. Most of the commands do actually exist, but I have to specify where they are. Could someone please modify the installation scripts to either backup this...

Hello, I'm not sure if this is the correct place to send this, but perhaps you can forward it to the proper folks if not... The Solaris port of OpenSSH includes an ssh_prng_cmds file used for collecting entropy, however many of the commands listed in the file are incompatible with Solaris command syntax. Not knowing much about entropy or random numbers, I've modified the file a bit to produce less errors and included a few commands that I thought might produce some ps...

http://bugzilla.mindrot.org/show_bug.cgi?id=449 Summary: ssh_prng_cmds has malformed arp command Product: Portable OpenSSH Version: 3.4p1 Platform: Sparc OS/Version: Solaris Status: NEW Severity: major Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org...

http://bugzilla.mindrot.org/show_bug.cgi?id=323 ------- Additional Comments From luc at suryo.com 2002-06-30 05:40 ------- A better solution is to install the pacthes that will support /dev/random and /dev/urandom. Then recompile openssl and then openssh. Solaris 8: 112438-01 patch for Sparc 112439-01 patch for x86 Solaris 9: has standard /dev/random and /dev/urandom Not sure if one can

...a, I have compiled and installed OpenSSH on a Solaris/Sparc machine and whenever I try to start any of the ssh programs I get "fatal: PRNG initialisation failed -- exiting" Now, I have looked through the mailing lists and have seen some mention that this indicates it can't open the ssh_prng_cmds file, which entropy.c also seems to indicate the problem is. However, this snippet from truss would indicate it opened it fine and started reading it: open("/usr/local/etc/ssh_prng_cmds", O_RDONLY) = 3 brk(0x000E6DB8) = 0 brk(0x000E8DB8)...

I have a need to provide ssh client binaries for use elsewhere on several platforms, some without /dev/random support. I can't assume that users will know how to install/run prngd or egd, so I was planning to rely on the builtin prng code. However this require the ssh_prng_cmds file to exist in a fixed location -- which would mean making binaries which either look for it in . or other similar hacks. To avoid this I altered entropy.c to include a copy (as a string) of the ssh_prng_cmds generated by configure and use that if the file can't be opened -- at a cost of abo...

Hi, I'm trying to build an openssh pkgadd package which is portable across Solaris 2.6,7 & 8, so I can't rely on /dev/random support and must instead fall back to ssh_prng_cmds for collecting entropy. One of the default commands in ssh_prng_cmds "arp -a -n" is a problem for any (2.6, at least) host which doesn't have an efficient/working DNS or other name resolution system - basically, without name service, this command hangs for a very long time, so effect...

The following patch against openssh-SNAP-20000823 allows to override the compile-time "ssh_prng_cmds" file at run time by adding new options to the server and client configurations. (We move binaries around a bit, and this was the only absolute path that couldn't be fixed at run-time). Regards Jan diff -ur openssh-SNAP-20000823.orig/entropy.c openssh-SNAP-20000823.new/entropy.c --- ope...

...- next part -------------- 174,180c174,180 < [ -f ${sysconfdir}/ssh_config ] || \\ < cp -p ${sysconfdir}/ssh_config.default ${sysconfdir}/ssh_config < [ -f ${sysconfdir}/sshd_config ] || \\ < cp -p ${sysconfdir}/sshd_config.default ${sysconfdir}/sshd_config < [ -f ${sysconfdir}/ssh_prng_cmds.default ] && { < [ -f ${sysconfdir}/ssh_prng_cmds ] || \\ < cp -p ${sysconfdir}/ssh_prng_cmds.default ${sysconfdir}/ssh_prng_cmds --- > [ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config ] || \\ > cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config.default \${PKG_INSTALL_...

..../install-sh -c -m 644 sshd_config.out /tools/OpenSSH/openssh-3.1p1/cont rib/solaris/package/usr/local/etc/sshd_config; \ else \ echo "/tools/OpenSSH/openssh-3.1p1/contrib/solaris/package/usr/local/etc /sshd_config already exists, install will not overwrite"; \ fi if [ -f ssh_prng_cmds -a ! -z "yes" ]; then \ /usr/bin/perl ./fixprogs ssh_prng_cmds ; \ if [ ! -f /tools/OpenSSH/openssh-3.1p1/contrib/solaris/package/usr/local /etc/ssh_prng_cmds ] ; then \ ./install-sh -c -m 644 ssh_prng_cmds.out /tools/OpenSSH/openssh- 3.1p1/contrib/solaris/...

...y for Damien, but if anybody else knows the answer please chime in. Why is it that on systems with no /dev/random or PRNGD or EGD (and I have a lot of Solaris systems in this situation because I don't have root access on them) that the OpenSSH 'ssh' command has to run through all those ssh_prng_cmds every time it starts up? Why doesn't ~/.ssh/prng_seed give it enough initial entropy? The old SSH 1.2.27 'ssh' command got away with using only ~/.ssh/random_seed, which it initializes by running a lot of system commands the first time it is run. Was that not secure enough? I don...

http://bugzilla.mindrot.org/show_bug.cgi?id=323 Summary: arp -n flag doesn't exist under Solaris, ssh_prng_cmds still uses it Product: Portable OpenSSH Version: -current Platform: All OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-unix-dev at...

http://bugzilla.mindrot.org/show_bug.cgi?id=449 ------- Additional Comments From keith at ajmani.org 2002-12-01 04:43 ------- Aside: this bug also existed in previous versions of opensshd. My bad for not reporting it earlier. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...sl/is Everything compiled Ok but there was a problem when doing make install, as ssh-rand-helper was looking in the wrong place for prng_command_file, so here is a patch for ssh-rand-helper.c. You need to delete a space before the string. 63c63 < # define SSH_PRNG_COMMAND_FILE SSHDIR "/ssh_prng_cmds" --- > # define SSH_PRNG_COMMAND_FILE SSHDIR"/ssh_prng_cmds" Regards Patrick

http://bugzilla.mindrot.org/show_bug.cgi?id=318 ------- Additional Comments From dtucker at zip.com.au 2002-11-10 09:11 ------- errno 13 == EACCES. Did you do the "make install" as root? If so did you do it on an NFS filesystem that maps root -> nobody? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=323 tim at multitalents.net changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |keith at ajmani.org ------- Additional Comments From tim at multitalents.net 2002-12-05 16:03 ------- *** Bug 449 has been marked as

http://bugzilla.mindrot.org/show_bug.cgi?id=318 ------- Additional Comments From roth at feep.net 2002-12-14 12:11 ------- Created an attachment (id=186) --> (http://bugzilla.mindrot.org/attachment.cgi?id=186&action=view) Makefile patch This isn't specific to Solaris; I'm having the same problem under AIX. Yes, I am building in an NFS-mounted directory where root is mapped