similar to: [Bug 2346] New: sshd -T doesn't write all configuration options in valid format

Hi, Is there any way to store HostKey in hardware (and delegate the related processing)? I have been using Roumen Petrov's x509 patch for clients, which works via an OpenSSL engine, but it does not seem to support server HostKey: http://roumenpetrov.info/pipermail/ssh_x509_roumenpetrov.info/2012q4/000019.html For PKCS#11, I have found an email on this list from a year back suggesting this

Could people please test -current? We will be making a release fairly soon. -d -- | By convention there is color, \\ Damien Miller <djm at mindrot.org> | By convention sweetness, By convention bitterness, \\ www.mindrot.org | But in reality there are atoms and space - Democritus (c. 400 BCE)

Hello, I came across an interoperability problem in OpenSSH 3.0p1 and 3.0.1p1 concerning the AFS token forwarding. That means that the new versions are not able to exchange AFS tokens (and Kerberos TGTs) with older OpenSSH releases (including 2.9p2) and with the old SSH 1.2.2x. In my opinion this problem already existed in Openssh 2.9.9p1, but I have never used this version (I only looked at the

https://bugzilla.mindrot.org/show_bug.cgi?id=2686 Bug ID: 2686 Summary: SSHD segfaults when trying to load RSA1 host keys Product: Portable OpenSSH Version: 7.4p1 Hardware: Other OS: Linux Status: NEW Keywords: patch Severity: enhancement Priority: P5 Component: sshd

https://bugzilla.mindrot.org/show_bug.cgi?id=2581 Bug ID: 2581 Summary: Coverity patches from Fedora Product: Portable OpenSSH Version: 7.2p1 Hardware: Other OS: Linux Status: NEW Keywords: patch Severity: enhancement Priority: P5 Component: sshd Assignee:

I was wondering what everyone's thoughts were on a simpler way to exclude addresses from having listeners on them. I know a lot of people have multiple subnets, especially larger corporations. Some networks are non-route-able, and therefor unsuitable for use with SSH, aside from communication between other servers on the same subnet. Given that we may want to exclude those non-route-able

chisq.test with simulate.p.value=TRUE uses the Patefield algorithm, this is not documented, and the original reference is not given, as it ought to be. The reference is: Patefield,W. M. (1981) An efficient method of generating r * c tables with given row and column totals (algorithm AS 159). Applied Statistics 30, 91-97. Kjetil Halvorsen

Hello, I've got a strange problem here: I installed Samba 3.0.2a using the official rpms on a SuSE 9.0 machine. I configured samba in the smb.conf as a PDC and created user and machine accounts on the system as well as in the smbpasswd. Afterwards I was able to join the domain with my Windows XP client. After a reboot I am unable to log on to the Domain on my WinXP client. There's just the

One difference I notice is that in your failing example you are invoking /usr/bin/ld directly to link: /usr/bin/ld -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect2.o mux.o -L. -Lopenbsd-compat/ -Wl,-z,retpolineplt -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-strong -pie -lssh -lopenbsd-compat -lutil -lz -lcrypt -lresolv whereas my example is

Hello! I've got a problem to select the correct trunk if there is one provider and different numbers with different configurations for this same provider. Example: trunk-prov1-2345 trunk-prov1-2346 trunk-prov1-2347 Each trunk registers an own number (at the same provider) and provides own configuration: they have different allowed codecs e.g.. What I'm experiencing now, is, that each

Greetings, Cohen, Cohen, West, and Aiken 2003 (Applied Multiple Regression-Correlation Analysis for the Behavioral Sciences, Third Edition) on page 273 state the covariance matrix of the regression coefficients is provided by standard programs for multiple regression, including SAS, SPSS, and SYSTAT. How can it be calculated with R. Thank you very much. pbm Peter B. Mandeville cel:

Hi, I believe that the BUG 2346 which was resolved in samba 3.0.14 has come back in the 3.0.23 series. Here is what I have noticed on two separate configurations. The samba packages were built on each machine using rpmbuild with the SRPMS provided for Fedora in the samba web site. Configuration 1. Two machines running with RHEL4, samba 3.0.23b-1, drbd-0.7.21 protocol C. Kernel:

Hello group, I have 2 Samba PCDs w/ LDAP + winbind called FILESERVER and FUNDUS-SRV for the domains PROFICON and FUNDUS, respectively. In PROFICON I created a trust account for FUNDUS using net rpc trustdom add FUNDUS <passwd> -U proficon\\administrator which creates the LDAP entry: dn: uid=FUNDUS$,ou=Computers,dc=office,dc=proficon,dc=sk uid: FUNDUS$ sambaSID:

Every time a user logs into Dovcot's IMAP service PAM closes the session immediately after it opens. I would like a user to have a session open long enough to read some emails. dictator at drakeclasher:~$ sudo dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.14-0.bpo.1-amd64 x86_64 Debian 7.8 mail_location = maildir:~/Maildir namespace inbox

https://bugzilla.mindrot.org/show_bug.cgi?id=2714 Bug ID: 2714 Summary: Allow specifying a key description when loading from stdin Product: Portable OpenSSH Version: 7.5p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: ssh-add

I have 2 zoo objects - 1) Interest rate spread between 10-YR-US-Treasury and 2-YR-US-Treasury (object name = sprd) 2) S&P 500 index (object name = spy) > str(spy) ?zoo? series from 1976-06-01 to 2011-03-31 Data: num [1:8791] 99.8 100.2 100.1 99.2 98.6 ... Index: Class 'Date' num [1:8791] 2343 2344 2345 2346 2349 ... > str(sprd) ?zoo? series from 1976-06-01 to 2011-03-31

Hello, Here's the situation I'm facing : I'm running OpenSSH on a server. On a gateway, I forward TCP:22 to the server TCP:22. So far, so good. I can log in from inside the lan by connecting using standard SSH port, or from the other network through the gateway. Now, I'd like a different configuration for connections from the outside. I start another SSHd on the

Hello Joshua, thank you very much for your extremely quick answer! I really appreciate your work and your friendly and your patient support! On 06/07/2017 at 10:33 PM, Joshua Colp wrote: > On Wed, Jun 7, 2017, at 05:28 PM, Michael Maier wrote: >> Hello! >> >> I've got a problem to select the correct trunk if there is one provider >> and different numbers with

I append a patch against openssh-3.5p1.tar.gz which adds a config option PAMServiceName. The option allows one to specify the PAM service at runtime in the config file rather than using __progname or having it hardwired to SSHD_PAM_SERVICE at compile time. I expect this to be useful if one wants to run multiple instances of sshd using different PAM configurations. With this patch

We are having an issue where DTMF is not being sent out right away and the tone duration is inconsistent. For a test we send a '5', then a second later we send a '9', and then five seconds later we send a '5'. If you look at the logs below you can see the first '5' is played right away, then the '9' comes in and gets queued, but it doesn't start