similar to: multiple Host entries in ssh_config

Hi OpenSSH developers I use OpenSSH under FreeBSD. It's cool and useful for me. By the way, sample line of ForwardX11 in ssh_config was not fit for default setting in readconf.c. I want to change ssh_config. ---------- In ssh source (src/usr.bin/ssh/readconf.c), currently ForwardX11 is disabled. 731 if (options->forward_x11 == -1) 732

Because ForwardX11 and ForwardAgent are so useful but introduce risk when used to a not well-secured server, I added a "warn" value to the ForwardX11 and ForwardAgent options which causes the ssh client to print a big warning whenever the forwarding is actually used. I plan to make "ForwardX11=warn" the default in my ssh_config distribution. I'm not proposing that this

Hi I think there is a problem is OpenSSH_2.9.9p2. Suppose I have in /etc/ssh/ssh_config just this and nothing more: Host * ForwardX11 yes and in ~/.ssh/config: Host * ForwardX11 no ssh -v tells they are read ok: debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Reading configuration data /home/kaukasoi/.ssh/config debug1: Applying options for

Hey folks! I need to allow smartcard authentication of a third party certificate generated with an UPN that has a suffix that is not my domain name. From AD literature, it's possible. I followed these guidelines to make an additional UPN available for login: https://technet.microsoft.com/en-us/library/cc772007.aspx But I'm missing something. Kerberos does a part of the job, but then

Versions: openssh-3.8p1-33, heimdal-0.6.1rc3-51, XFree86-4.3.99.902-40, tk-8.4.6-37, all from SuSE 9.1 (unhacked); back-version peers have openssh-3.5p1, XFree86-4.3.0-115, etc. from SuSE 8.2. Symptoms: 1. When the client and server versions are unequal, the Kerberos ticket is not accepted for authentication. All the clients have PreferredAuthentications gssapi-with-mic, gssapi, others. 2.

In 2.3.0, the per-user config file was read before the system-wide config file, so options set in ~/.ssh/config took precedence over system-wide defaults. In 2.9.9, the system-wide file seems to be read first, contrary to the man page (cf. ssh.c ll. 631-632). It seems to me that the old behaviour made more sense. (I discovered the change because I could not override a "ForwardX11"

Hi, A user has noticed that X11 forwarding does not appear to work when using session multiplexing. It seems that the DISPLAY environment variable is not getting set in the slave sessions. Any thought? The ~/.ssh/config ib below. Host somehost-master ControlMaster yes ControlPath ~/.ssh/somehost.sock HostbasedAuthentication no HostName somehost Host somehost-slave ControlPath

A few options appear to be missing from the list in ssh's manual. The one I didn't add is EnableSSHKeysign, whose description implies it is only effective when placed in the system-wide config file. Index: ssh.1 =================================================================== RCS file: /cvs/src/usr.bin/ssh/ssh.1,v retrieving revision 1.319 diff -u -p -r1.319 ssh.1 --- ssh.1 7 May 2011

Hi everyone! Does anyone use, rsync, under windows, without Cygwin? When I type something like this: rsync -auvlHI --delete --partial --modify-window=2 --log-format=" %t %o %l %f " --stats -vv -e "ssh -o ForwardX11=no -vv -i "e:/program/sinc/.ssh/sinc_rsa" -l USER" "e:/program" SERVER:dir_dest rsync answer me with: ssh: e: no address associated with name

Hi all, I am struggling with remote R sessions and a (I suspect) locale related encoding problem: Using the X11 device (X11forwarding enabled), whenever I try to plot something containing umlauts using ggplot2, I am seeing sth like ,---- | Error in grid.Call(L_stringMetric, as.graphicsAnnot(x$label)) : | invalid use of -61 < 0 in 'X11_MetricInfo' `---- Using base graphics is fine

Hi all! I've a server with Centos 4.0 without X server, but I need use mysql-administrator from other pc with X server. In the moment to export X from the server this message show me: [root at server]# mysql-administrator (mysql-administrator-bin:19124): Gtk-WARNING **: cannot open display: The /etc/ssh/sshd_config have X11Forwarding yes and the /etc/ssh/ssh_config have Host *

Hello i have a problem on CentOS 4 with starting remote x application on remote CentOS 3 od Solaris 9 boxes. The problem is: When I run it from CentOS 3 it's OK form CentOS 4 I cannot find a bad word in logs ... My local machine stoping firewall [root at klima-pc ~]# service iptables stop [root at klima-pc ~]# iptables-save [root at klima-pc ~]# SELinux is OFF I am connecting by ssh

Hi, I have a VM with a git repository whose origin is on github. I have several keys known to github, so I needed to set git's core.sshcommand config parameter in the repository to something like this: ssh -i ~/.ssh/id_ed25519_github2 But it meant that I needed to copy that key to the VM. The same key is available via my forwarded ssh-agent connection. Is it possible to tell ssh to use

Host based authentication does not seem to be working for us after upgrading to openssh-3.4p1 (we were at openssh-3.1p1) (openssl is at 0.96d). Any time we try to connect from another unix box also running openssh-3.4p1, we get the following error (on the server side) and host based auth fails (it falls back to password prompt). sshd[15038]: error: ssh_rsa_verify: RSA_verify failed:

https://bugzilla.mindrot.org/show_bug.cgi?id=2031 Priority: P5 Bug ID: 2031 Assignee: unassigned-bugs at mindrot.org Summary: ssh config parser ignores host-specific overrides after wildcard. Severity: minor Classification: Unclassified OS: Linux Reporter: openssh at richardneill.org

Hi, the following patch to contrib/cygwin/ssh-host-config creates /etc/ssh_config and /etc/sshd_config according to the current default config files. Could somebody please check it in? Corinna Index: contrib/cygwin/ssh-host-config =================================================================== RCS file: /cvs/openssh_cvs/contrib/cygwin/ssh-host-config,v retrieving revision 1.3 diff -u -p

I'm running a headless Linux installation (FC11) on Amazon EC2 and need to run some console-based (no window) 32-bit DOS executables... I've been running this fine for the past couple years on another installation (FC10) with v1.1.23, by setting the "TERM" environment variable to "xterm" and I believe it ran the "tty" graphics-driver and worked just great.

Hi I have written a small introduction to newbies in Danish on ssh and friends. Now some people are questioning my advice and I think they have a point. I am advocating people to use DSA-keys and a config file with this: Protocol 2 ForwardAgent yes ForwardX11 yes Compression yes CompressionLevel 9 and running ssh-agent and ssh-add, and then loggin in without giving keys. One

Hi, It's been uploaded to non-us.debian.org, but if you're in a hurry, you can grab it here: http://www.hands.com/~phil/debian/openssh/ Things from the debian patch that might be worth taking upstream: configure.in: . The tcp-wrappers patch (mentioned here recently) Makefile: . Put OPT_FLAGS back in so I can set options in debian/rules . Install ssh with SUID bit set

Hi, I get this message on the latest Debian potato for i386. --> ssh -f localhost xterm sb at localhost's password: --> xterm Xt error: Can't open display: That happens also when connecting to another linux box: --> ssh -f box2 /usr/X11R6/bin/xterm --> /usr/X11R6/bin/xterm Xt error: Can't open display: The $DISPLAY is :0.0 for box1 undefined for box2 after