similar to: ssh-agent clustering

https://bugzilla.mindrot.org/show_bug.cgi?id=1506 Summary: rationalize agent behavior on smartcard removal/reattachment Product: Portable OpenSSH Version: 5.1p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Smartcard AssignedTo:

It appears there is an opportunity for a denial-of-service attack against ssh-agent when using ForwardAgent. This note describes the circumstances, and provides a patch. Background (not the vulnerability): If ssh-agent is forwarded to a compromised account, a remote attacker could use the connection to authenticate as the owner of the agent. "ssh-add -c" currently defends

Hi, I can disable agent-forwarding for any given key by prefixing it with "no-agent-forwarding", but it seems there's no global sshd_config setting for this (ie no "AgentForwarding [yes|no]"). Is this on purpose? If so, what's the rationale? -Jan -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type:

Can anyone offer suggestion about getting readline to work on Solaris? (v1.5.1) When I use the up arrow or ctrl-p to try to repeat the last command my session just beeps. It appears that the .Rhistory file that should appear in my startup directory is not being created. Thanks! The screen shot below shows cled=TRUE and no .Rhistory file created: $ /apps/R-1.5.1/bin/R R : Copyright 2002, The

I've noticed that the ssh-agent applies any keys it already has passwords for (via ssh-add) first, overriding the ssh config files for preferred identity file from .ssh/config and -i. This seems a documented behavior. However, this causes problems with some tool chains that use the authorized_keys command directive to change behavior based on which key is used. In my case, I use gitolite for

Saben si el estimador VARHAC de Den Haan y Levin (1994) ha sido implementado en R? Solamente encontre rutinas para RATS y GAUSS en la pagina de Den Haan. Saludos, Jose Jose Luis Iparraguirre [[alternative HTML version deleted]]

A co-worker argues we can login using only password to a "ssh-key restricted host (PasswordAuthentication no)", without being asked by any passphase; just by putting a key (no need to be the private key) on another password-based host. It that true? I do not think so. I would name that as an "important OpenSSH daemon security bug". That is because I think it is not true.

On 25.09.2017 20:28, Sami Ketola wrote: >> On 25 Sep 2017, at 21.19, Garry Glendown <garry at glendown.de> wrote: >> >> doveadm(root): Error: chdir(/root/) failed: Permission denied >> (euid=479(dovecot) egid=478(dovecot) missing +x perm: /root, dir owned >> by 0:0 mode=0700) >> doveadm(root): Error: chdir(/root) failed: Permission denied >> >>

Hi, I have the following code and am using R 2.7.2: JIBqq <- (Jqrt.IB[2:length(Jqrt.IB)]/Jqrt.IB[1:(length(Jqrt.IB)-1)])-1 JIBqq <- cbind(zoo(JIBqq, Jqrt.time[2:length(Jqrt.time)])) y.JIBqq <- merge(JIBqq,lag(JIBqq,-1)) > y.JIBqq JIBqq lag(JIBqq, -1) 2004-06-30 0.003318909 NA 2004-09-30 -0.028536136 0.003318909

On 01/01/14 18:46, Ilia Mirkin wrote: > On Wed, Jan 1, 2014 at 9:04 AM, Sid Boyce <sboyce at blueyonder.co.uk> wrote: >> On 01/01/14 00:55, Ilia Mirkin wrote: >>> On Tue, Dec 31, 2013 at 7:41 PM, Sid Boyce <sboyce at blueyonder.co.uk> >>> wrote: >>>> On 31/12/13 10:36, Ilia Mirkin wrote: >>>>> Having a dmesg would be nice. One thing

I recently replaced a 8600 GT with the above card on openSUSE Tumbleweed x86_64. The screen now flickers and when I change desktops it takes a some 10 to 15 seconds to display the new windows. e.g if I change from desktop 1 (konsole) to desktop 8 (thunderbird) it switches but konsole is displayed for 10 to 15 seconds before thunderbird appears. Occasionally the screen flickers wildly before

This is an old idea I had, resurrected by the mention of changing the agent protocol in "ssh-agent allowing access to other users?" thread. Currently, when you forward the ssh-agent, the forwarded host has the same rights as the local user. And when the key requires confirmation, the is quite terse: "Allow use of key foobar? Key fingerprint abcdf." It would be desirable to

Hi, had the quota info added to the AD in an unused field, and it seems to work ... >> On 25 Sep 2017, at 21.51, Garry Glendown <garry at glendown.de> wrote: >> >> >> >> On 25.09.2017 20:28, Sami Ketola wrote: >>>> On 25 Sep 2017, at 21.19, Garry Glendown <garry at glendown.de> wrote: >>>> >>>> doveadm(root): Error:

The patch (against 4.7p1) modifies gnome-ssh-askpass to optionally generate a one-time password and transmits it to the user via an out-of-band communication channel. If you can read the password and enter it back into the gnome-ssh-askpass dialog, ssh-agent is allowed to continue with the authentication process. There are two ways to use the modified gnome-ssh-askpass. The first

On Tue, Mar 10, 2020 at 09:08:56PM +0000, John Garry wrote: > On 10/03/2020 18:32, Christoph Hellwig wrote: > > On Wed, Mar 11, 2020 at 12:25:28AM +0800, John Garry wrote: > > > From: Hannes Reinecke <hare at suse.com> > > > > > > Allocate a separate 'reserved_cmd_q' for sending reserved commands. > > > > Why? Reserved command

On Tue, Mar 10, 2020 at 09:08:56PM +0000, John Garry wrote: > On 10/03/2020 18:32, Christoph Hellwig wrote: > > On Wed, Mar 11, 2020 at 12:25:28AM +0800, John Garry wrote: > > > From: Hannes Reinecke <hare at suse.com> > > > > > > Allocate a separate 'reserved_cmd_q' for sending reserved commands. > > > > Why? Reserved command

Hi, after fighting Dovecot almost every step of the way, I have finally gotten most of the functions configured on a customer box (used Cyrus on a previous install, but it was dropped from SLES 12 ...) The mail server setup uses LDAP for user authentication, has a central maildir tree (.../dovecot/maildir/<USER>/...) that is used for all users' mail, sieve is also running well. The

Hey I want to start the next Newsletter early so it can be a little more relaxed. The next release will be the 1. April. I really need someone to *interview*, just drop me a mail and I will send you a few questions. This can be anyone from the community that has some sort of CentOS install. And then I want to introduce a new section called DeskShot where users can show off their workplaces.

On 31/12/13 10:36, Ilia Mirkin wrote: > On Tue, Dec 31, 2013 at 5:14 AM, Sid Boyce <sboyce at blueyonder.co.uk> wrote: >> System x86_64 with openSUSE 13.1. >> X.Org version: 1.14.99.905 >> >> openSUSE 12.2 kernels boot successfully into a graphical screen, login to >> KDE4, etc. all normal. >> >> 3.13-rc kernels boot fully with X running but no

Hi * after trying everything I could think of and find on the web, I'm totally stumped ... maybe someone give me some hints on what I'm doing wrong, or where to look ... I have an ancient customer box with sendmail & cyrus imap, with imap using an LDAP database of users (no locally configured users), all of which is working fine. This machine needs to be replaced by a new