search for: ssh_session2

Numerous how-tos all over the Internet show how one would set up a tunnel using ssh, e.g.: ssh -f -o Tunnel=ethernet <server_ip> true I was wondering if there's a way to subsequently acquire the names of the local and remote tun/tap interfaces (e.g., using the default "-w any:any") for subsequent automatic tunnel configuration, e.g.: ip link set $TapDev up ip link set

Hi, In file ssh.c, in function "ssh_session2", this piece of code: /* If requested, let ssh continue in the background. */ if (fork_after_authentication_flag) if (daemon(1, 1) < 0) fatal("daemon() failed: %.200s", strerror(errno)); implements the "-f" option, but when run from cron, it does not detach...

Hi, I have a problem with a Linux box which I updated from 2.5.2p2 to 2.9p2 recently. It's running a tunnel started via inittab using a script which starts ssh -2 -N -o 'ConnectionAttempts 3600' -L <tunnel> $host This has run reliable with 2.5.2 over the last months. Now, after I have upgraded to 2.9p2, the tunnel is closed right after each attempt of an application to use

...ot; [-w local_tun[:remote_tun]] [user@]hostname [command]\n" +" [-w local_tun[:remote_tun]] [-z certificate_file]\n" +" [user@]hostname [command]\n" ); exit(255); } @@ -215,6 +216,7 @@ usage(void) static int ssh_session(void); static int ssh_session2(void); static void load_public_identity_files(void); +static void load_certificate_files(void); static void main_sigchld_handler(int); /* from muxclient.c */ @@ -595,7 +597,7 @@ main(int ac, char **av) again: while ((opt = getopt(ac, av, "1246ab:c:e:fgi:kl:m:no:p:qstvx" - &...

...kets based on their QoS has not led to a solution (with different hosts being a workaround but IMO not a well maintainable one), I've run through the sequence and options with the current versions: * QoS is still decided after expansion (expansion happens in main; QoS is set down from there in ssh_session2 / ssh_session2_open / ssh_session2_setup) * QoS, unless explicitly configured, is set to interactive based on the presence of tty_flag || a successful X forwarding. * tty_flag is set in main based on -t/-T, the presence of a command and isatty a few lines before the control path expansion. It shou...

...ive For sshd protocol 2 connections, function calls are made: main to do_authentication2 to do_authenticated2 which does not call packet_set_interactive. For ssh protocol 1 connections, packet_set_interactive is called from ssh_session. For protocol 2, the corresponding function ssh_session2 makes no call to packet_set_interactive. ---------------- I haven't delved into the protocol specifications, so if protocol 2 lacks an obvious way to determine if a connection is "interactive", then so be it. However, the keepalive value ought to be set in any case. My suggestions...

...nect_stdio_fwd ( host_to_connect=0x600039800 "machine2", port_to_connect=22, in=in at entry=4, out=5) at /usr/src/debug/openssh-6.5p1-1/channels.c:1269 #4 0x0000000100401566 in ssh_init_stdio_forwarding () at /usr/src/debug/openssh-6.5p1-1/ssh.c:1260 #5 0x0000000100454171 in ssh_session2 () at /usr/src/debug/openssh-6.5p1-1/ssh.c:1606 #6 main (ac=<optimized out>, av=<optimized out>) at /usr/src/debug/openssh-6.5p1-1/ssh.c:1130 This is not Cygwin specific. To be really sure I tested this on Linux and the message shows up, too, while it doesn't with 6.4p1....

...oaming == -1) - options->use_roaming = 1; + options->use_roaming = 0; if (options->visual_host_key == -1) options->visual_host_key = 0; if (options->ip_qos_interactive == -1) --- ssh.c 30 Jul 2015 00:01:34 -0000 1.420 +++ ssh.c 13 Jan 2016 23:17:23 -0000 @@ -1882,9 +1882,6 @@ ssh_session2(void) fork_postauth(); } - if (options.use_roaming) - request_roaming(); - return client_loop(tty_flag, tty_flag ? options.escape_char : SSH_ESCAPECHAR_NONE, id); }

...ure or rather a bug. I usually expect a daemonizing process to close its file descriptors - at least in children. The OpenSSH client does not do that in some cases... From current master's ssh.c: ------------------------------------>snip<------------------------------------ static int ssh_session2(struct ssh *ssh, struct passwd *pw) { [...] if (options.control_persist && muxserver_sock != -1) { [...] if (!fork_after_authentication_flag) need_controlpersist_detach = 1; fork_after_authentication_flag = 1; } ------------------------------------>snip<--------------------...

...ff1cf6b0 select (ffbeefd0, ff238bc4, 14b480, ff238bc8, 14b484, a) + 298 0004cc44 client_wait_until_can_do_something (ffbef200, ffbef1fc, ffbef1e4, 0, 9, 10000) + 3c4 0004e8a4 client_loop (0, ffffffff, 0, 14afb8, ff235ad4, 85308) + 6d4 00040c94 ssh_session2 (14afb8, 2, ffbef684, 141684, 144da8, 144da8) + 11c 0003f41c main (4, ffbef50c, ffbef520, 131c00, 0, 0) + 1cd4 0003cfbc _start (0, 0, 0, 0, 0, 0) + dc Remote: truss: poll(0xFFBEF558, 2, -1) (sleeping...) pstack...

...his is a failed connection -> debug3: packet_send2: adding 56 (len 61 padlen 11 extra_pad 64) debug2: we sent a password packet, wait for reply debug1: Authentication succeeded (password). debug2: fd 5 setting O_NONBLOCK debug3: fd 6 is O_NONBLOCK debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Requesting no-more-sessions at openssh.com debug1: Entering interactive session. debug2: callback start debug2: client_session2_setup: id 0 debug2: channel 0: request pty-req confirm 1 debug3: tty_make_modes: ospeed 38400 debug3: tty_make_mo...

http://bugzilla.mindrot.org/show_bug.cgi?id=1330 Summary: RFE: 'ControlPersist' support -- automatically fork and leave ControlMaster behind as a d?mon Product: Portable OpenSSH Version: 4.6p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component:

Hi ! Here's a patch to add remote port forwarding support (protocol 2) for openssh. I have tried to test that it works like it should but a more thorough testing is needed. This patch adds both client/server support. The patch should be applied to openssh-2.1.1p4 source tree. Also included is a PortForwarding sshd_config option, new ./configure option --disable-forwarding that should make it