similar to: Known hosts and dynamic IP addresses

Hi, I have a problem with the host verification of ssh in several networks of the same structure: In all cases there is a router or a firewall with an official IP address, making the ssh-ports of several hosts with RFC1918-addresses available through NAT or TCP forwarding. Thus, different hosts appear on the same IP address, just with different ports. Since SSH uses the IP address but not

> Sounds more like you just introduced a new self-created problem that would require yet another workaround.. ;-) Definitely wrong. Appending .dir to directories and .folder to folder files keeps files completely distinct and name collissions are not possible. > But what was not clear from your mail, is what exactly you identified as "the problems" with standard Maildir++

Hi, I am trying to deal with the problem, that under regular mbox format a path can lead to either a file or a directory, but not both, while under IMAP, a path is usually both, a message folder containing subfolders. I found dovecot's approach to this problem, the Maildir++ layout described under http://wiki2.dovecot.org/MboxChildFolders , and was astonished to see, what problems come with

https://bugzilla.mindrot.org/show_bug.cgi?id=3648 Bug ID: 3648 Summary: ssh client blocks itself by leaving unix domain socket alive after user Product: Portable OpenSSH Version: 9.3p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: ssh

Hi, just a simple question about dovecot: The mbox file format contains the SMTP envelope sender and transmission date in a FROM ... line preceding the RFC822 mail header and body. As far as I see at the moment, the IMAP protocol does not support transmission of that SMTP envelope data in either way, but confusingly uses the term ?envelope? for a structure describing the RFC822 mail header.

Hi, I'd like to suggest a new feature to rsync. Problem: Currently, rsync generates a recursive list of file existing a the source directory, modifies this list by includes and excludes, and then copies these files. That's pretty good in most, but not all cases. I am mirroring a debian archive, but unfortunately, debian mixes all files of several distributions in a subtree /pool.

Hello. We are currently installing a new firewall, and would like to use a mixture of NAT and port mapping to have a single "gateway" host address which exposes a range of open ports, each of which maps to sshd of a different host in our internal network (e.g. ssh.jesus.cam.ac.uk on port 6789 maps to internal host1 port 22 whereas ssh.jesus.cam.ac.uk on port 6790 maps to internal

Hi, I'd like to do the following: Have an IMAP server, avaible - at localhost 127.0.0.1 without SSL for local clients and web based applications such as squirrelmail - from outside with SSL for mobile users but - for security reasons - would like to use different passwords on both ports. How could I achieve that? regards Hadmut

Hi, dovecot provides POP and IMAP services. Proposal: Would be nice if it also could offer an RSS-Feed for a mailbox, giving a summery of sender/subject/date and maybe the first lines of text. regards Hadmut

Hi, just a question: I know that dovecot supports SASL authentication and supports LDAP. Which means that dovecot performs the SASL methods itself and stores the plaintext secret on LDAP. But it is also possible to have the LDAP do the SASL work and dovecot just pass SASL messages through? Even when the LDAP server uses a proprietary SASL method not supported by dovecot? regards Hadmut

Hi, I'm looking for a hint about what has changed in syslinux 6.03. Some years ago I had written a script that configures a bootable USB pen drive with syslinux and some boot images, which still worked well under Ubuntu 14.04 LTS and previous versions, but does not work anymore under Ubuntu 15.10 with syslinux 6.03. I've boiled this down to a test-script that isolates the problem:

Hi, I was just using ssh to access an IPv6 machine. ssh root at 2002:1234::1 (example address) works, while scp root at 2002:1234::1:/etc/motd . works not, scp parses this as hostname 2002 and file path 1234::1:/etc/motd It's a syntax problem. The manpage addresses this problem for -L and -R arguments, but not for scp arguments. Any idea how to deal with this problem? regards

Hi, it's not yet a bug report, just a question: After I was successfully using dovecot-imap and Thunderbird for quite a while without any problem (debian unstable), I now sometimes experience that the IMAP-connection hangs and thunderbird waits forever when accessing a folder. I did not yet analyze the problem and I am not sure whether it is a thunderbird or a dovecot problem. Did anyone

Hi, I would like to setup an IMAP server with SASL and LDAP support. As far as I can see dovecot supports SASL and LDAP, but not the way I need it. If I understand dovecot correctly, it has it's own set of SASL mechnisms and uses the LDAP server just to store the plaintext password. In case of authentication dovecot fetches the plaintext password from LDAP and then performs the SASL

Hi, although dovecot is great and almost exactly solving my problems and fitting my requirements, there is an odd detail that causes me problems: The %c variable. (See http://wiki2.dovecot.org/Variables ) I'm managing an IMAP server for an association, which is connected to an LDAP server. Users can connect in three ways: IMAPS from the internet, IMAP from local acccounts, and IMAP

Hi, today I tried to migrate an old NT4 PDC to Samba 3 as described in http://samba.org/samba/docs/man/Samba-HOWTO-Collection/NT4Migration.html but with the Samba databases on LDAP: Whenever I tried that net rpc vampire -S NT4PDC -U administrator%passwd I received error messages that the users cannot be created. When I set debugging to level 2, it told me about Found bogus group

The .ssh/known_hosts table cannot handle reaching different sshd servers behind a NAT router. The machines are selected by having the SSHDs respond to differnt ports. A second request would be to allow known_hosts checking solely on the dns name, wildcarding the IP address. This would be useful to avoid continuously warning the user every time you connect to a machine with a changing IP address

Hello all, i just discovered that the known hosts file seems to only store the server finger prints for distinct *hostnames/IPs*, not hostnames/IPs and ports, meaning i can't ssh to a multiple boxes on the same host even if they have different ports. Every client other than the one shipped with openSSH seems to work fine, presumably because they store fingerprints by host:port combinations

On Tue, 29 Sep 2020 at 23:16, Nico Kadel-Garcia <nkadel at gmail.com> wrote: [...] > I gave up on $HOME/.ssh/known_hosts a *long* time ago, because if > servers are DHCP distributed without static IP addresses they can wind > up overlapping IP addresses with mismatched hostkeys You can set CheckHostIP=no in your config. As long as the names don't change it'll do what you

http://bugzilla.mindrot.org/show_bug.cgi?id=393 markus at openbsd.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From markus at openbsd.org 2002-09-11