similar to: FW: poor permissions on ssh binary

I just installed portable openssh 2.9p2, but the issue I have shouldn't be unique to the portable version. I built with % ../configure --prefix=/usr/local/encap/openssh-2.9p2 --sysconfdir=/etc --with-cflags=-O2 --with-tcp-wrappers --with-ssl-dir=/usr/local --with-md5-passwords --disable-suid-ssh When it came time to make install, this command was executed: /usr/local/bin/install -c -m 0711

Crap. I hit send too fast. Last sentence in first paragraph should have read "no completely secure way" for authentication to be passed-- because the agent-based forwarding program could have been compromised as well--except for the cases already mentioned such as SRP and RSAAuth where the auth. information is better protected. Even if the SF server had been capable of forwarding the

All-- But it's not as simple as forwarding the password-based authentication. Regardless of what method was used to SSH from system one (user's) to system two (SF), the user then started up *a second* SSH session to go from two (SF) to three (Apache). There is no effective way for any authentication information from the first session to be passed to the second, in my mind. Remember

Aloha Jiwen (I used to get kama'aina discounts, but no longer)-- First, you didn't tell us what OpenSSH source code version you're trying to compile. Without that info there are any number of possible problems--so I'll assume (for now) that you're using the latest released portable version of OpenSSH. Please reply with specific version info. The fact that things are blowing

Joyce-- > I did not install /www/gzip.org/zlib because I assumed that I > probably have that, since I have gunzip.... gunzip being present doesn't usually mean that zlib is present, but you might actually have zlib. Look for a libz.a in /usr/local/lib (or appropriate other directory structure depending on where gunzip is on your system...) > Openssh compiled but I kept receiving

Hi! Here is a patch against openssh-2.9.p2 that adds support for Maildir style mailboxes, the way which qmail prefers to store mails in. The changes/additions are the following: 1) $MAIL env. variable is set to $HOME/Maildir if it exists, or else to _PATH_MAIL/$USER. 2) Mail checking (the main purpose of this patch) is done by first checking whether $MAIL is a regular file or directory. If

just wondering about this. i noticed "make install" installs ssh-keyscan group-writable. is this intentional? openssh-2.5.2p2/Makefile.in, line 168: $(INSTALL) -m 0775 -s ssh-keyscan $(DESTDIR)$(bindir)/ssh-keyscan chris -- Christopher Linn, <celinn at mtu.edu> | By no means shall either the CEC Staff System Administrator | or MTU be held in any way liable

Hey everyone, I have been using sftp for quite some time now and we have just hit 256 sftp users. Line 21 of servconf.h reads: #define MAX_ALLOW_USERS 256 /* Max # users on allow list. */ I am curious why this is in a header file and not something that is in sshd_config that can be changed without recompile? Thanks in advance! -- James Dennis Harvard Law School "Not

Aloha Rip Thanks for your quick response. I did compile OpenSSH stuffs by using GCC 2.95.2 first, the error is the same. Since there are no issues on other platforms by using GCC 3.3.2, I tried to take a luck on HP-UX 10.20 by using GCC 3.3.2. Unfortunately, it is same, even at the same line What I am guessing is that it could be from some system environment variable setting, but I am not sure

I hate following up to myself, but I thought a clarification of one point (specifically WRT RC5 which was mentioned in the original question) might be worthwhile...because what I should have said originally was that "To the best of my non-legally- admissible knowledge, however, none of the algorithms in the current *OpenSSH* implementation are currently encumbered by patents that would

Samba 2.0.7, NT WS 4.0 sp6, Slackware 7.0 (glibc 2.1.2), linux kernel 2.2.15 with crypto patch patch-int-2.2.14.1. Samba configured/compiled with the following switches: --with-smbmount --with-syslog Most of the time writing to, or copying from samba shares, hangs, then fails. Trying to copy scrt303.exe from HOMES share to NT box, smbstatus reports: Samba version 2.0.7 Service uid

Samba gives read_socket_data: recv failure for 4 when trying to write or read with NT4 WS, why? Samba 2.0.7, NT WS 4.0 sp6, Slackware 7.0 (glibc 2.1.2), linux kernel 2.2.15 with crypto patch patch-int-2.2.14.1. Samba configured/compiled with the following switches: --with-smbmount --with-syslog Most of the time writing to, or copying from samba shares, hangs, then fails. Trying to copy

Hello! My name is Egor Rukhvadze. I'm looking for a job in US as a UNIX/FreeBSD system administrator and/or network administrator that lets me utilize my experience in an Internet Service Providing (ISP). Name: Egor M. Rukhvadze. Birthday: April 13 1973. Contacts: Phone number: home +7 (095) 126-41-84 (8AM-1PM PST or 8AM-4PM EST). Cell: +7 (903) 792-31-53 e-mail: gara@mail.ru ICQ#

It compiled with no problems on both UnixWare 7.1.1 and AIX 4.3.3 by running './configure' Thanh > -----Original Message----- > From: Damien Miller [mailto:djm at mindrot.org] > Sent: Wednesday, June 28, 2000 5:02 PM > To: Gilbert.R.Loomis at saic.com > Cc: nikhil at mailsafe.org; openssh-unix-dev at mindrot.org > Subject: Please test this snapshot > > > On

Well, I've finally gotten around to compiling and testing OpenSSH 2.5.2p1, in order to update the contrib/solaris packaging scripts. Somehow on my test system, I'm getting errors that indicate that I've still got some old copy of OpenSSL being found somewhere...but I can't for the life of me tell where. The compile went fine (it found the OpenSSL 0.9.5a libraries that I had

Nico-- SSH is trying to "get entropy" by taking the (somewhat-deterministic) output of a bunch of system commands, on those OSs that don't provide a /dev/random or its equivalent. The commands that it uses are in /etc/ssh_prng_cmds or its equivalent on your system; just comment out any of the lines (and stop/restart SSHd) in order to change which system commands are used as inputs

how can I prevent the 'EXT3-FS: mounted / in ordered-data mode' messages? they're cluttering my boot screen ;) thanks! -- Douglas J. Hunley (doug@hunley.homeip.net) - Linux User #174778 Admin: http://hunley.homeip.net/ Admin: http://linux.nf/ Brainbench Linux Administration Certified ~~ Now offering Linux admin services for the home user ~~ Linux: The OS people choose without

Heya guys, How long until we get a WORKING Vorbis Comment editor? For Windows? -- Robert J. Lynn, Jr. Brainbench Certified Computer Technician, Linux Administrator, and Master Windows 98 User PGP Key ID: 0xCDE22CFB (RSA) rjlynn@suscom.net, rjlynn@crosswinds.net EFNet: Vegeta99 --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To

Here's what we need for a BIG popularity boost: Good interfaces! Yeah yeah, i know, i'll be bitched at on how I should do it on my own, but one thing that always ticked me about MP3 - the lack of tools that do the job without the mess. What we need now is - an ID tag editor. Menu-driven, that means CLI or GUI. We need that, badly. Encoder - GUIs for X and MS Windows. Right now, encoding

On Solaris 8, I have ssh 3.1.0 and on other box Sol 7 I have 1.2.26 (min version for comtable with ssh 3), I checked also /etc/ssh2/sshd2_config file ## SSH1 compatibility # Ssh1Compatibility <set by configure by default> # Sshd1Path <set by configure by default 2) generate key for ssh3 # ssh-keygen2 -P /etc/ssh2/hostkey