similar to: Per-port hostkeys

How do you enable hostbased authentication in OpenSSH? I have two Red Hat 7.3 machines running openssh-3.4p1, and I would like to be able to ssh from either of the machines to the other, as any user, without using passwords or per-user keys. My /etc/ssh/sshd_config contains: [...] IgnoreRhosts no HostbasedAuthentication yes [...] My /etc/ssh/ssh_config contains: [...]

When connecting to a host for which there's no known hostkey, check if the relevant key has been accepted for other hostnames. This is useful when connecting to a host with a dymamic IP address or multiple names. --- auth.c | 4 ++-- hostfile.c | 42 ++++++++++++++++++++++++++++-------------- hostfile.h | 8 ++++++-- sshconnect.c | 39 +++++++++++++++++++++++++++++++++------

Hello, This hostkeys extension is great, reading[1]: """ OpenSSH supports a protocol extension allowing a server to inform a client of all its protocol v.2 host keys after user-authentication has completed. """ I wonder, why should user authentication be completed before this functionality is available? This means that ssh-keyscan tool (for example) cannot take

http://bugzilla.mindrot.org/show_bug.cgi?id=1279 Summary: Address- and/or port-specific HostKeys support Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: sshd AssignedTo: bitbucket at mindrot.org ReportedBy:

This (very quick) patch allows you to connect with the commercial ssh.com windows client and use x509 certs for hostkeys. You have to import your CA cert (ca.crt) in the windows client and certify your hostkey: $ cat << 'EOF' > x509v3.cnf CERTPATHLEN = 1 CERTUSAGE = digitalSignature,keyCertSign CERTIP = 0.0.0.0 [x509v3_CA]

Hi, I often change the machines (and thus the hostkeys) that are on a IP (a service environment with a IP assinged for the machine to test). So every time I want to connect to a new machine I have to delete the previous key from the known_hosts file. Since I got tired of running a remove script manually, I made this small patch which adds the possibility to replace the real key with the

This is concerning an Asterisk 1.4.18 server. We have approximately 70 DID numbers. Incoming calls are placed into the "incoming" context (by zapata.conf) and are routed based on the dialed number. I want to do some manipulation (CallerID name override) to all incoming calls before they are routed. I would prefer to avoid duplicating the necessary code in each DID extension stanza,

https://bugzilla.mindrot.org/show_bug.cgi?id=3155 Bug ID: 3155 Summary: openssh support hostkey encrypt Product: Portable OpenSSH Version: 8.2p1 Hardware: ARM64 OS: Linux Status: NEW Severity: security Priority: P5 Component: ssh-keygen Assignee: unassigned-bugs at mindrot.org

Does Icecast support bandwidth negotiation like Real's server? If so, how would one configure this (can't find it in the docs or list archives). If not, is there any interest in adding this capability? -- Kevin DeGraaf --- >8 ---- List archives: http://www.xiph.org/archives/ icecast project homepage: http://www.icecast.org/ To unsubscribe from this list, send a message to

Hello, OpenSSH-wizards. In our company, we have looked into SSH-HostKey-signing in order to realize automated access without the need to accept the server's hostkey, manually. I got it to work with the HostCertificate-directive inside the sshd_config. Now, I was wondering whether it is possible to have multiple signatures, so I can, for example, sign the hostkey once with a

Hello, If anyone is using a TE121B card and it works reliably (i.e. no "HDLC Bad FCS" or similar errors), could you pass along the make, model, and basic configuration of your Asterisk server? We tried upgrading our old Dell PowerEdge server to a SuperMicro system, but that didn't help. I would like a solid recommendation before I suggest another purchase. Thanks. -- Kevin

Greetings, I am writing an AGI script that needs to check on the idle/busy status of a number of SIP peers (mostly SPA9xx phones, with a few Polycoms and Snoms thrown in for fun). Is it possible to call Asterisk functions (e.g. SIPPEER) from AGI scripts? Based on my Googling, I would guess in the negative. I have tried various permutations of Set() and Eval() without success. I have also

OpenSSH gurus: Apologies if this has been covered already (or is a genuine FAQ). I've searched both Google and MARC extensively on this issue, and have come up empty. I use OpenSSH 3.0.2p1 (openssl-0.9.6c) on a group of Linux (Slackware 8.0, kernel 2.4.13, glibc 2.2.3) machines that have this in /etc/hosts: 10.1.1.2 s1 s1.[domain].com ... 10.1.1.6 s5 s5.[domain].com This is in

I need to monitor the states of my T1/PRI Zap channels. Specifically, I need to be able to programmatically determine whether a channel is unused, carrying an inbound call, or carrying an outbound call. Using the manager interface, I can easily tell whether a Zap channel is used or not by looking at the results of: Action: Command Command: zap show channel <x> Or: Action:

I am not a programmer and am self-taught so I may lack the language to ask this appropriately (perhaps why an rseek search was unfruitful). Let's say I saved a file to my desktop called foo.pdf. Then I want R to return the file path of foo.pdf (pretend I don't know the location(path) of foo.pdf). Question: How would I get R to return the unknown file path for foo.pdf. I

I''m using Xen 3.1.0 on Debian etch, kernel 2.6.18-4-xen-amd64. One of the guests runs Windows XP. I am trying to install an application (Autodesk Inventor) that spans two DVDs. The config file for the domain in question contains: disk = [ ''phy:/dev/volgrp0/halebopp,ioemu:hda,w'', '',hdc:cdrom,r'' ] I ran "xm block-list halebopp --long" and

Hello! Like many organizations, we have "disaster-recovery" location, where separate servers are running ready to take up important services should the primary location fail. Some of the services provided involve accepting files over scp (and sftp), and here is the problem... The primary and the secondary hosts use different host-keys... If the hosts were accessed as

Hello, I'm using Xapian 1.0.2 (flint) and matching Search::Xapian. I'm getting: terminate called after throwing an instance of 'Xapian::DocNotFoundError', which dumps core. at first it was after adding my 2nd document (to an empty db, although I don't know if that has any bearing) to the database with a replace_document() call. I shifted the first document off the

Hello all, My apologies if this is a FAQ; I was not able to find the answer in any existing documentation. Furthermore, I know it''s not germane to Xen itself, but I''m hoping that someone else''s knowledge can save me a little bit of time. :-) In order to run Windows (XP, 2003, etc.) as a hardware-virtualized guest of Xen, is it necessary to purchase a retail-boxed

Hello, probably a newbie question, but i didnt find any information on plotting/regressing w.r.t. a date data type. My trials were unfruitful. Can anyone help ? Thanks in advance! Here is my interaction with R: > tabelle date number date2 1 2009-01-1 1673 2009-01-01 2 2009-12-1 2111 2009-12-01 3 2010-7-1 2487 2010-07-01 4 2013-2-1 4301 2013-02-01 > regression.punkte<-lm(tabelle$number