Displaying 20 results from an estimated 3000 matches similar to: "Potential DoS against forwarded ssh-agent"
2008 Aug 05
5
[Bug 1499] New: Add "ForwardAgent ask" to ssh_config
https://bugzilla.mindrot.org/show_bug.cgi?id=1499
Summary: Add "ForwardAgent ask" to ssh_config
Classification: Unclassified
Product: Portable OpenSSH
Version: 4.7p1
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: ssh
AssignedTo: unassigned-bugs
2008 Aug 20
1
using ssh-add unattended on dubious files -- how can i avoid a hang?
I need ssh-add to fail cleanly if it tries and fails to read a key,
rather than prompting the user. I can't seem to figure out how to do
that.
This is on a Linux 2.6.26 system, running OpenSSH 5.1p1 (as built on
debian lenny/sid)
First, the things i've tried:
* i've unset the DISPLAY and SSH_ASKPASS environment variables, so no
X11-style prompting should happen.
* i've
2007 Oct 10
0
Areca 1100 SATA Raid Controller in JBOD mode Hangs on zfs root creation.
Just as I create a ZFS pool and copy the root partition to it.... the performance seems to be really good then suddenly the system hangs all my sesssions and displays on the console:
Oct 10 00:23:28 sunrise arcmsr: WARNING: arcmsr0: dma map got ''no resources''
Oct 10 00:23:28 sunrise arcmsr: WARNING: arcmsr0: dma allocate fail
Oct 10 00:23:28 sunrise arcmsr: WARNING: arcmsr0:
2000 Sep 09
0
2.2.0p1 PATCH: ssh/scp/slogin will invoke ssh-askpass
Enclosed is a patch against 2.2.0p1 that teaches ssh (and therefore
slogin and scp) how to invoke ssh-askpass to request a password,
RSA/DSA key passphrase, or an skey challenge response.
I've tested this on Linux (i386), for passwords and RSA/DSA key
passphrases. I cannot easily test whether the Right Thing will happen
for skey challenge responses; I would appreciate it if someone who
uses
2009 Jan 22
0
Unintended key info disclosure via ForwardAgent?
It seems that users may be disclosing unintended public key info
when logging into remote hosts.
Use of the words keypair/keyid/etc have been bastardized. Signature
is likely better. Note also, the author may be without clue.
Setup:
[g] - refers to an administrative group of hosts
[n] - refers to a host within that group
ws[g][n] - management workstations [trusted]
User ssh-add's keys for
2023 Apr 01
1
[Bug 3555] New: ForwardAgent doesn't work under Match canonical
https://bugzilla.mindrot.org/show_bug.cgi?id=3555
Bug ID: 3555
Summary: ForwardAgent doesn't work under Match canonical
Product: Portable OpenSSH
Version: 8.4p1
Hardware: amd64
OS: Linux
Status: NEW
Severity: normal
Priority: P5
Component: ssh
Assignee: unassigned-bugs at
1999 Dec 10
2
[David Huggins-Daines <dhd@plcom.on.ca>] Bug#52414: ssh-add uses ssh-askpass, but ssh doesn't
Damien,
Here's a forwarded bug for you.
Cheers, Phil.
--[[message/rfc822]]
Subject: Bug#52414: ssh-add uses ssh-askpass, but ssh doesn't
Reply-To: David Huggins-Daines <dhd at plcom.on.ca>, 52414 at bugs.debian.org
Resent-From: David Huggins-Daines <dhd at plcom.on.ca>
Resent-To: debian-bugs-dist at lists.debian.org
Resent-CC: Philip Hands <phil at hands.com>
2004 Apr 12
1
Regarding SSH_ASKPASS
I've been giving SSH_ASKPASS a hard look, and it's not clear to
me how it's supposed to work. The documentation (ssh.1) seems
explicit enough:
SSH_ASKPASS
If ssh needs a passphrase, it will read the passphrase from the
current terminal if it was run from a terminal. If ssh does not
have a terminal associated with it but DISPLAY and SSH_ASKPASS
are set, it will execute
2013 Apr 02
1
RFC: More explicit ssh agent forwarding on SSH_ASKPASS confirmation
This is an old idea I had, resurrected by the mention of changing the
agent protocol in "ssh-agent allowing access to other users?" thread.
Currently, when you forward the ssh-agent, the forwarded host has the
same rights as the local user. And when the key requires confirmation,
the is quite terse: "Allow use of key foobar?
Key fingerprint abcdf."
It would be desirable to
2005 Jan 04
1
trying to debug ssh-askpass problem
Hi all,
I have a script which calls ssh-add at a certain point, and I'm
getting the following error:
ssh_askpass: exec(/usr/bin/ssh-askpass): No such file or directory
I don't see why it's doing this, since SSH_ASKPASS isn't set, and
there should be a working terminal:
SSH_ASKPASS
If ssh needs a passphrase, it will read the passphrase from the
2002 Jan 16
0
[Bug 69] New: Generalize SSH_ASKPASS
http://bugzilla.mindrot.org/show_bug.cgi?id=69
Summary: Generalize SSH_ASKPASS
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: ssh
AssignedTo: openssh-unix-dev at mindrot.org
ReportedBy: bbum at codefab.com
2008 Dec 07
3
Help with Battlefield 2 and EADM
Hi,
I purchased BF2: Complete Collection from EA's web site about a year or so ago. I was running Windows and bought it using EA's Download Manager (aka EA Link). I couldn't run the game without that program being active. Now, I proudly, run Linux full time and I can't get the game going because it still depends on EADM. I installed EADM, but it won't run. Is there a work
2007 Jan 31
2
Patch to fix the 255 status code problem
Hi,
Currently using openssh-4.5p1 on Solaris 8 in conjunction with Oracle 8i
dataguard. Is there a patch available to prevent ssh returning status
code 255 for a successful execution of a remote connection/command.
Many Thanks,
Tim Mann
2023 May 12
0
[Bug 3571] New: Canceling SSH_ASKPASS actually sends an empty string
https://bugzilla.mindrot.org/show_bug.cgi?id=3571
Bug ID: 3571
Summary: Canceling SSH_ASKPASS actually sends an empty string
Product: Portable OpenSSH
Version: 8.8p1
Hardware: Other
OS: Linux
Status: NEW
Severity: major
Priority: P5
Component: ssh
Assignee: unassigned-bugs at
2023 Dec 16
0
[Bug 3644] New: Pass the number of attempt to SSH_ASKPASS
https://bugzilla.mindrot.org/show_bug.cgi?id=3644
Bug ID: 3644
Summary: Pass the number of attempt to SSH_ASKPASS
Product: Portable OpenSSH
Version: 9.4p1
Hardware: All
OS: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: ssh
Assignee: unassigned-bugs at
2007 Jan 18
2
SSH_ASKPASS behavior change proposal
Hello, OpenSSH Developers!
I'm not a member of the OpenSSH development team or a member of this
mailing list. I have a small change to propose for OpenSSH and since
the mailing list page at openssh.com indicated the general discussion
list is for support, I thought this list would be a better place to
discuss this. Please forgive me if I've committed a faux pas.
I propose that the
2011 Nov 21
3
ssh-keygen -r should support SSHFP records for ECDSA (or at least return non-zero error code on failure)
hi folks:
it looks like ssh-keygen -r can''t export SSHFP records for ECDSA keys:
0 dkg@pip:/tmp/cdtemp.oiRYAS$ ssh-keygen -f foobar -t ecdsa -q -P ''''
0 dkg@pip:/tmp/cdtemp.oiRYAS$ ssh-keygen -r foobar -f foobar.pub
export_dns_rr: unsupported algorithm
0 dkg@pip:/tmp/cdtemp.oiRYAS$
the first number in my prompt is the return code of the last command;
note that
2004 Oct 04
1
[Bug 69] Generalize SSH_ASKPASS
http://bugzilla.mindrot.org/show_bug.cgi?id=69
------- Additional Comments From yath at yath.eu.org 2004-10-05 00:57 -------
Created an attachment (id=722)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=722&action=view)
Patch to make use of SSH_ASKPASS more configurable
$SSH_USE_ASKPASS may be set to "never", "always" or "preferred", to choose
2008 Aug 16
21
[Bug 1506] New: rationalize agent behavior on smartcard removal/reattachment
https://bugzilla.mindrot.org/show_bug.cgi?id=1506
Summary: rationalize agent behavior on smartcard
removal/reattachment
Product: Portable OpenSSH
Version: 5.1p1
Platform: Other
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Smartcard
AssignedTo:
2001 Aug 28
1
Compile-time warning in readpass.c
The patch below fixes a compile-time warning in readpass.c.
MIME-Version: 1.0
Content-Type: application/aegis-patch
Subject: openssh.2 - Fix warning in readpass.c
Content-Name: openssh.2.C010.patch
Content-Disposition: attachment; filename=openssh.2.C010.patch
X-Aegis-Project-Name: openssh.2
X-Aegis-Change-Number: 10
#
# Fix the following warning in readpass.c:
#
# readpass.c: In function