search for: sshconnect1

...re I know it was reading which gives this output (cd openbsd-compat && make) make[1]: Entering directory `/home/jnfergu/openssh/openbsd-compat' make[1]: Nothing to be done for `all'. make[1]: Leaving directory `/home/jnfergu/openssh/openbsd-compat' gcc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L. -Lopenbsd-compat/ -L/usr/athena/lib/lib -L/usr/athena/include/lib -lssh -lopenbsd-compat -lkafs -lresolv -ldes -lpam -ldl -lwrap -lutil -lz -lnsl -lcrypto -ldes sshconnect1.o: In function `try_krb4_authentication': /home/jnfergu/openssh/ssh...

...for this) people require this capability for their scripts/automation. I understand the possibility of avoiding passwords altogether by generating keys, but such an implementation of password on the command line should not be too difficult. sshconnect2.c, for example, prompts for this on line 273. sshconnect1.c also does something similar in the function try_password_authentication(char *prompt) Would it be possible for you to include this? I would do it myself, however I've had problems compiling openssh. If you are willing to help me compile open ssh, I am willing to work on this issue, which I s...

...to copmpile openssh-2.3.0p1 against KTH-KRB dist. (ftp.pdc.kth.se/pub/krb/src) of kerberosIV and AFS 3.6. However, I get two errors: 1. redifinition of types, conflicting with krb.h (which #includes ktypes.h) - removing temporarily the u_int code from ktypes.h helped 2. send_afs_tokens() - in the sshconnect1.c show both problems, although the redefinition problems occured at the early beginning of compilation. Are there any patches available? TIA $ uname -a SunOS pf-i400 5.6 Generic_105181-23 sun4u sparc $ gcc -v Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.6/2.8.1/specs gcc version 2...

...the /afs information that you pointed me at in a subsequent email first, but I wanted to update you on what happened following this path: I did get some mileage out of both of your suggestions below, but still did not make it through (now working with openssh-2.9p2): gcc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L. -Lopenbsd-compat/ -R/usr/local/ssl/lib -L/usr/local/ssl/lib -L/usr/local/lib -R/usr/local/lib -L/usr/athena/lib -R/usr/athena/lib -L/usr/afsws/lib -lssh -lopenbsd-compat -lkafs -lresolv -ldes -lkrb -lpam -ldl -lwrap -lz -lsocket -lnsl -lgen -lc...

...arc OS/Version: SunOS Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: dean.r.smart at mail.sprint.com When using scp|ssh in nohup|cron|batch in a non interactive mode, sshconnect1.c and sshconnect2.c do not have the ability to call read_passphrase in such a manner to cause ssh-askpass to be utilized as documented in the man pages. The calls are as follows for the released code: # grep 'read_passphrase(' sshconnect[12].c-original sshconnect1.c-original: passphras...

...KRB MM> dist. (ftp.pdc.kth.se/pub/krb/src) of kerberosIV and AFS 3.6. However, I MM> get two errors: MM> 1. redifinition of types, conflicting with krb.h (which #includes MM> ktypes.h) - removing temporarily the u_int code from ktypes.h helped MM> 2. send_afs_tokens() - in the sshconnect1.c show both problems, although MM> the redefinition problems occured at the early beginning of compilation. MM> Are there any patches available? MM> TIA See below. MM> $ uname -a MM> SunOS pf-i400 5.6 Generic_105181-23 sun4u sparc MM> $ gcc -v MM> Reading specs from...

------- Forwarded Message Subject: Re: Dubious use of BN_num_bits in sshconnect1.c From: Niels Provos <provos at citi.umich.edu> In-Reply-To: alex at foogod.com, Sun, 18 Feb 2001 19:38:56 PST To: alex at foogod.com Cc: openssh-unix-dev at mindrot.org Date: Mon, 19 Feb 2001 10:07:24 -0500 Sender: provos at citi.umich.edu Hi Alex, there is no problem in OpenSSH. In mess...

...respond_to_rsa_challenge: public_key 1151 < host_key 1024 + SSH_KEY_BITS_RESERVED 128 ..and a resulting refusal to continue. I've done a bit of digging in the source, and have found the source of the problem to be the use of BN_num_bits to determine the length of the keys received in sshconnect1.c. The problem is that BN_num_bits does not return the number of significant bits of a given bignum, but rather the position of the most significant 1 bit, which is not necessarily the same thing. It is perfectly possible (and as demonstrated, does occur) for the remote end to generate an N-bi...

...OS/Version: Linux Status: NEW Severity: normal Priority: P4 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: alfw at stanford.edu There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with OpenSSH-3.4p1 (and...

...ization from incompatible pointer type mac.c:44: warning: initialization from incompatible pointer type mac.c:45: warning: initialization from incompatible pointer type mac.c:46: warning: initialization from incompatible pointer type mac.c:47: warning: initialization from incompatible pointer type sshconnect1.c: In function `try_krb5_authentication': sshconnect1.c:566: warning: passing arg 5 of `krb5_mk_req' discards qualifiers from pointer target type sshconnect1.c: In function `send_krb5_tgt': sshconnect1.c:693: warning: passing arg 3 of `krb5_fwd_tgt_creds' discards qualifiers from...

...ter applying the heimdal patch from http://meta.cesnet.cz/software/heimdal/index.en.html which also applies perfectly for the 3.6.1 it works. Can't this code be integrated in the main tree? Another thing compilation on Solaris. As far as I can remember we have to add the following two lines in sshconnect1.c to get it work: #include <sys/ioctl.h> #include <sys/filio.h> Without it the following happens: sshconnect1.c: In function `send_afs_tokens': sshconnect1.c:799: warning: implicit declaration of function `_IOW' sshconnect1.c:799: parse error before `struct' It will be hap...

...P_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c sshconnect1.c cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The redefinition of the macro "DES_KEY_SZ" conflicts with a current definition because the replacement lists differ. The redefinition is now in effect. (macroredef) #define DES_KEY_SZ (sizeof(DES_cblock)) -----------...

...ERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFI! G_H -c sshconnect1.c cc-1204 cc: WARNING File = /usr/athena/include/krb-protos.h, Line = 175 The indicated declaration is not visible outside of the function. krb_check_auth __P(( ^ cc-1204 cc: WARNING File = /usr/athena/include/krb-protos.h, Line = 456 The indicated declaration is not visibl...

There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with OpenSSH-3.4p1 (and...

Hi, Has anybody produced diffs for openssh-2.3.0p1 for the rsa keyexchange problem that Core-SDI described ? ( I noticed that fix is already in openbsd tree ). -Jarno -- Jarno Huuskonen - System Administrator | Jarno.Huuskonen at uku.fi University of Kuopio - Computer Center | Work: +358 17 162822 PO BOX 1627, 70211 Kuopio, Finland | Mobile: +358 40 5388169

...+when the server claims that a key is one bit longer than it is. +The default is +.Dq yes . +Disabling this allows better compatibility with older ssh versions. .It Cm SmartcardDevice Specifies which smartcard device to use. The argument to this keyword is the device diff -Nur openssh-3.7.1p2/sshconnect1.c openssh-3.7.1p2-serverlieswarning/sshconnect1.c --- openssh-3.7.1p2/sshconnect1.c 2003-09-02 08:51:17.000000000 -0400 +++ openssh-3.7.1p2-serverlieswarning/sshconnect1.c 2003-11-04 02:29:50.000000000 -0500 @@ -494,7 +494,8 @@ packet_get_bignum(server_key->rsa->n); rbits = BN_num_bits(...

....3.0p1 on Solaris-7, KTH-krb4-1.0.3, TransArc-AFS-3.6 # ../openssh-2.3.0p1/configure --prefix=/afs/eos.dk/sw/pack/openssh-2.3.0p1 --with-kerberos4=/afs/eos.dk/sw/pack/krb4-1.0.3 --with-afs --with-ssl-dir=/afs/eos.dk/sw/pack/openssl-0.9.6 To make it compile, I have to add the patch below to make sshconnect1.c line 546 compile. It states: void send_afs_tokens(void) { CREDENTIALS creds; struct ViceIoctl parms; struct ClearToken ct; int i, type, len, plen; char buf[2048], *p, *server_cell; char buffer[8192]; /* Move over ktc_GetToken, here's s...

...=/usr/athena[1] and --with-kerberos4=/usr/athena on Solaris 2.7, you need to apply this minor patch to get the client to build. - You could argue that kafs.h should include these sys files since it uses macros inside them. - Booker C. Bense [1]- Where kth installs by default. diff -u -r1.1.1.1 sshconnect1.c --- sshconnect1.c 2001/10/01 18:18:47 1.1.1.1 +++ sshconnect1.c 2001/10/02 22:53:09 @@ -25,6 +25,8 @@ #include <krb5.h> #endif #ifdef AFS +#include <sys/ioccom.h> +#include <sys/ioctl.h> #include <kafs.h> #include "radix.h" #endif

...SSH_BUG_IGNOREMSG }, + { "^1\\.2\\.2[3-9]", SSH_BUG_SERVERLIESSIZE }, + { "^1\\.2\\.3[0-1]", SSH_BUG_SERVERLIESSIZE }, { "^1\\.3\\.2", SSH_BUG_IGNOREMSG }, /* f-secure */ { "^SSH Compatible Server", /* Netscreen */ SSH_BUG_PASSWORDPAD }, --- sshconnect1.c.O Thu Jul 5 10:49:13 2001 +++ sshconnect1.c Thu Jul 5 10:49:28 2001 @@ -37,6 +37,7 @@ #include "packet.h" #include "mpaux.h" #include "uidswap.h" +#include "compat.h" #include "log.h" #include "readconf.h" #include "key.h&qu...

...e confirmation using the +.Ev SSH_ASKPASS +program before the key is added (see +.Xr ssh-add 1 +for details). +The argument must be +.Dq yes , +.Dq ask , +or +.Dq no . +The default is +.Dq no . .It Cm AddressFamily Specifies which address family to use when connecting. Valid arguments are Index: sshconnect1.c =================================================================== RCS file: /usr/obsd-repos/src/usr.bin/ssh/sshconnect1.c,v retrieving revision 1.70 diff -u -N -p sshconnect1.c --- sshconnect1.c 6 Nov 2006 21:25:28 -0000 1.70 +++ sshconnect1.c 11 Jan 2010 22:49:11 -0000 @@ -57,21 +57,15 @@ exte...