similar to: SSH proxy or gateway?

Needed to do the following to get sftp-server to compile on HP-UX 11. Not sure what the right "portable" fix might be. Also, should sftp-server really be installed in prefix/libexec/ssh/ or just prefix/libexec/? --- defines.h~ Tue Sep 5 07:13:07 2000 +++ defines.h Tue Sep 5 14:36:24 2000 @@ -143,9 +143,7 @@ typedef uint8_t u_int8_t; typedef uint16_t u_int16_t; typedef uint32_t

Hi, I'm getting the: checking for OpenSSL directory... configure: error: Could not find working SSLeay / OpenSSL libraries, please install despite Freebsd coming with openssl in the base system. I have tried various settings using --with-ssl-dir and still haven't had any luck. Any suggestions would be greatly appreciated. Locate finds the following relevant looking files:

Until I can determine what the issue and background is, you'll need to define _REENTRANT in the latest snapshot so the strtok_r() function prototype is pulled in from <string.h>. This is for HP-UX 11.0; I'm not sure about 10.20.

When compiling openssh-SNAP-20001014 on Solaris 2.6 with gcc 2.95.2 I get: In file included from rijndael.c:42: rijndael.h:6: parse error before `u1byte' and a lot more warnings and errors... Solved by adding #include "config.h" in rijndael.c Lasse Holmqvist

Hi! The return values from socket() changed from EINVAL to EAFNOTSUPPORT for not supported address family in Linux 2.4.0-test8. This small patch fixes the 'error: socket: Address family not supported by protocol' and 'Disconnecting: Command terminated on signal 11.' when enabling X11 forwarding. Cheers /Martin Johansson --- channels.c.orig Wed Aug 23 00:46:24 2000 +++

Description: getnameinfo() (confirmed for CVS version 1.14.2.1) does this sort of buffer size checks (these is just two of many cases): if (strlen(sp->s_name) > servlen) return ENI_MEMORY; strcpy(serv, sp->s_name); ... if (strlen(hp->h_name) > hostlen) {

after I check sshd.init file, I found: you use 'daemon' function to start sshd. but 'daemon' will not start a daemon if the daemon process already exist, isn't it right?

Hello! Today I've found, downloaded and compiled openssh-2.2.0-p1. It basically worked, except that users other than root were not allowed to login. My system is a Linux-2.4.0-test7 with glibc-2.1.3. No PAM is installed/used. It uses MD5 passwords and shadow with account expiration feature. In handling of the latter, a probable bug was found. In auth.c, allowed_user(), there is a code at

Attached is a small tar archive with a start of a contrib/hpux/ directory. Right now it has a startup/shutdown script. -------------- next part -------------- A non-text attachment was scrubbed... Name: hpux.tar Type: application/octet-stream Size: 10240 bytes Desc: Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20000905/42c23a97/attachment.obj

Dear mailng list of OpenSSH There is a very small bug in openssh-2.1.1p4. After extracted openssh-2.1.1p4.tar.gz, a file named "openssh.spec" for constructing an rpm file of SuSE linux in "openssh-2.1.1p4/contrib/suse/". A small bug in the "openssh.spec" file brings about failure in constructing an rpm file. Line 171 in "openssh.spec" "install -m644

I have tried ( to no avail ) to get SecurID and ssh work tegether. The biggest sticking points have been either new pin / next token mode OR scp. I would be interested in looking at your patch. I have been banging on auth-pam.c to work in the pam stuff for the last couple days, but it seems auth-pam is an incomplete implementation of pam. The patch from Steve VanDevender looked promising.

Hi, I'm not subbed, but I was just building OpenSSH 2.2.0p1 on Solaris 8 and I noticed that the compile failed because $(AR) was not defined in Makefile. Setting AR=/usr/xpg4/bin/ar in Makefile made it compile without a hitch. My configure flags were --with-ipv4-default. Thanks for an otherwise excellent program. Nathaniel Couper-Noles

Hi, we're using SSH-1.5-OpenSSH-1.2.2 and SSH-1.5-OpenSSH-2.2.0p1 on solaris for x86 (Solaris 2.8). Both Versions seem to have a problem in forwarding ports that may concern htonl/ntohl: SSH Version OpenSSH_2.2.0p1, protocol versions 1.5/2.0. Compiled with SSL (0x0090600f). debug: Seeding random number generator debug: ssh_connect: getuid 0 geteuid 0 anon 1 debug: Connecting to 6.0.1.1

In line 542 of entropy.c is the owner of the PRNG seedfile checked. Root is also a valid owner of this file. So the line must be: if (((st.st_mode & 0177) != 0) || !( (st.st_uid == original_uid) || (st.st_uid == 0) ) ) Regards, Martin --- Martin Luig email: email at Martin-Luig.de

hp-pa2.0W HP-UX 11.0 pl6/00 /opt/zlib (1.1.3) /opt/openssl (0.9.6) (tried sh and ksh) CFLAGS="-O -Ae" LIBS="-L/opt/zlib/lib" ./configure --prefix=/opt \ --with-pid-dir=/var/run --with-ipv4-default --with-ssl-dir=/opt/openssl States it is unable to find openssl. Anyone worked around this already? I would think it has problems compiling the piece of test-code, but I have no

Gidday, I've just tried installing openssh-2.2.0p1 and found that it globbers my ssh_prng_cmds file which has been customised from the normally installed one. On BSDi 4.0.1 it doesn't detect enough commands for ssh-keygen to be happy. Most of the commands do actually exist, but I have to specify where they are. Could someone please modify the installation scripts to either backup this

Hello all, A few days ago I noticed that the following seems to happen when upgradign OpenSSH on Linux-based (/etc/rc.d/init.d/sshd) based systems: - sshd is restarted with 'sshd restart'; however sshd serving in port 22 is not replaced. - you have to kill the old one (netstat -ltp | grep :ssh ; kill ...) first, then restart sshd. - This might happen only when performing the upgrade

Hello, I am using RedHat's most recent openssh-2.20p1-5 srpm recompiled on Linuxppc under glibc 2.1.95/Linux 2.4-test10pre2/gcc 2.95.3(cvs). I have noticed an oddity when connecting to machines running ssh 2.3.0's sshd2 server. While the connections occur with no problem after awhile the connection fails when idle with the following error message... Hm, dispatch protocol error: type

I've been using ssh for a while now (both fsecure and openssh), but am not an expert on security. I was wondering whether the following is secure: I create a key pair, trusted & trusted.pub I run sshd on a server (no telnet, rsh or other services). I create a user "guest", and put "trusted.pub" in my authorized file. I give away "trusted" (the private key)

Hello all, There are two issues in OpenSSH RPM Red Hat spec file (against 2.2.0p1): 1. /etc/rc.d/init.d/sshd uses 'success' and 'failure'. These don't work in Red Hat 5.2; else the spec file is fine. Initscripts requirement (for the one in RH60) added. 2. If you're upgrading over SSH ltd's ssh-server, the server will be stopped and sshd removed from chkconfig