similar to: forwarding features

I have a need to provide ssh client binaries for use elsewhere on several platforms, some without /dev/random support. I can't assume that users will know how to install/run prngd or egd, so I was planning to rely on the builtin prng code. However this require the ssh_prng_cmds file to exist in a fixed location -- which would mean making binaries which either look for it in . or other

Before I actually implement the small changes needed to allow the location of ssh-rand-helper to be specified in the config file, I'd like to check that in doing so I won't be opening up a huge security hole. My brief reading of the code suggests that in entropy.c:seed_rng() the ssh-rand-helper is run as the original uid (for binaries which were setuid in the first place of course), so I

Sorry if I'm duplicating an existing patch, but... On systems with no seteuid() that have setreuid() there is an emulation, but if both are lacking (but we do have setresuid()), nothing is done. The following seems to be right, but I've only got one machine (running an ancient version of HP-UX) which needs this so it may not be general: --cut-here-- --- config.h.in.orig Thu Jun 7

Here is a quick patch against openssh-2.5.1p1 to add a new config option (pkalg) for the ssh client allowing the selection of which public keys are obtained/verified. --cut-here- diff -c3 -r orig/openssh-2.5.1p1/key.c openssh-2.5.1p1/key.c *** orig/openssh-2.5.1p1/key.c Mon Feb 5 18:16:28 2001 --- openssh-2.5.1p1/key.c Sun Mar 11 23:10:10 2001 *************** *** 534,539 **** --- 534,567 ----

Hi everybody, I've never posted here before but I seem to be having a similar problem to what Tim Rice had in July, namely when running the configure script I get the following: configure: error: *** zlib missing - please install first or check config.log *** However, I have definitely installed zlib (see below): dngwks1:/tmp/openssh-3.0p1 # swlist # Initializing... # Contacting target

(Sorry for being so OT, but I'm currently experiencing this inconvenience and want to be more productive than doing a CVS update at home and getting to the office.) So, what you are suggesting is that I setup a squid proxy on a box outside the firewall on port 80 and use MindTerm to connect via that? Until this past weekend when the network was "redone", we had a proxy we could

Is the following (from configure.in) intended: *-dec-osf*) if test ! -z "USE_SIA" ; then AC_MSG_CHECKING(for Digital Unix Security Integration Architecture) should that be "$USE_SIA" or similar or what is the point of testing a constant string for being zero length... The reason I ask is the for complex reasons we don't want SIA enabled on Tru64 since it breaks some

Maybe I just can't read properly, but I just spent the best part of a day trying to work out why HostbasedAuthentication wouldn't work for me (with protocol 2 in openssh-2.9p1). It seems (though maybe there is something wrong with my install), that after enabling it in the sshd_config it doesn't work, since the client will not in fact request it (by default). I was fooled by the

Just for peace of mind, can someone who knows the openssh code better than I do, confirm that openssh doesn't use (in any circumstances) the openssl prng (since the code in versions prior to 0.9.6b is rather weak). My understanding is that it doesn't (using either /dev/random, egd, prngd or the builtin code), but I may have missed some other use of the openssl prng elsewhere... -- Jon

Hi, I am trying to install the R libraries "rmutil" and "repeated" on a Mac OS X version 10.4.1 (which has the latest version of the Mac Developer tools installed) and I am having trouble compiling the libraries. The error message I receive is as follows (I have only included the error message when I try and install the rmutil library): ............................ *

I think Rscript has a problem running files that have mac encodings for newline (^M rather than ^J on linux). If I source the file within R, it works okay: > source('j.R') [1] "MEA_data/sernagor_new/CRX_P7_1.txt" But if I run the file using Rscript on a linux box I get a strange error message: $ Rscript --vanilla j.R " Execution halted The example script j.R is at

In Debian 1.1, the optional DOSEMU package installs /usr/sbin/dos setuid root. This is a serious security hole which can be exploited to gain access to any file on the system. Package: dosemu Version: 0.64.0.2-9 ------- start of cut text -------------- $ cat /etc/debian_version 1.1 $ id uid=xxxx(quinlan) gid=xxxx(quinlan) groups=xxxx(quinlan),20(dialout),24(cdrom) [quinlan:~]$ ls -al

Hi, What do you think of disabling port forwardings configured in ~/.ssh/config with scp. Copying of files is shorter or longer but still only temporary process. Moreover, when you have one session opened and used for "real" forwardings, you can't use scp for the remote host, as the forwardings can't be established again (ports are busy). /S

Hello, I have in my ssh config: Match host 2.3.4.5 exec "~/bin/connect.sh" ProxyCommand ssh -D 1080 -L8080:1.2.3.4:8080 -p 443 bouncehost -W %h:%p ~/bin/connect.sh: #!/bin/bash if echo | nc -w 1 2.3.4.5 22 | grep -q SSH; then false else true fi So when I can't connect to the system directly it should go over a bounce host but at the same time use a

Hi, the attached patch implements adding and canceling of remote port forwardings by communicating with a running ssh client via a control socket. Thus, one can do this: ssh -MNfS ~/.ssh/ctl remotehost and then: ssh -S ~/.ssh/ctl -O add-rforward 2000:forward:80 localhost to add a new remote forwarding or ssh -S ~/.ssh/ctl -O cancel-rforward localhost:2000 localhost to remove it. The

Hi, I've been planning to develop a support for tunneling between "local_tcp => server_AF_UNIX". This way, every user of server machine, can have: 1. personal address space (if socket is located on personal directory). Currently one must check assigned local port every time starting a server (e.g. vncserver), and redirect a local port to "random" remote port. 2. Added

Hi, I can't seem to find any docs on the "granulepos" field. What does it represent? I know it's zero for header pages and non-zero for body pages, but that it can also be -1. When is it -1? And while I'm at it, is there any invalid serial number, that is guarenteed never to appear in a page? 0? -1? Thanks, Martin --- >8 ---- List archives:

Hello, We are using the AllowUsers feature of sshd and would like to control which users can ask for forwarding of which ports. E.g. when the user is foo, allow him to tunnel connections to bar:5678 and baz:7654, but no shell (or some dummy shell) and no other forwardings. Is such feature planned for the future? Would you accept such patch in the mainstream distribution? I would appreciate Cc:

R does a great job with the fine details regarding plots. e.g in the following: library(lattice) y <- -4:4/10 xyplot(y~1, las=1) the y axis is labelled with numbers -0.4, -0.2, 0.0, 0.2, 0.4 with the numbers aligned on the decimal point. How do I get the same behaviour in the colorkey of a levelplot? e.g. levelplot(matrix(y,3,3)) the numbers in the colorkey seem left-aligned, and

One of the examples in Rscript.Rd seems mis-formatted, in that the format statement is incomplete: ## Not run: Rscript -e 'date()' -e 'format(Sys.time(), " Both Rscript.Rd in R 2.5.0 and the version at: https://svn.r-project.org/R/trunk/src/library/utils/man/Rscript.Rd have Rscript -e 'date()' -e 'format(Sys.time(), "%a %b %d %X %Y")' Do