On Mon, 8 Feb 2010, Thomas Burgess wrote:
>> hi Thomas, frankly, if the SSH server refused to start after the
>> config was changed, it must have been broken which could probably happen
>> with OpenSSH as well.
>>
>>
>Yes, i figured that much =) I found the log which showed the error but it
>didn't give an exact enough message saying which part was wrong.
you mean the log on the server side, right? What was the error
message that was not clear? If it's really not clear, it could be fixed.
>> Well, actually the "client" i'm using isn't a client at all, it's a
>bookmark system. It actually uses the default ssh client in osx, it just
>lets you specify different settings and terminal window collors. It seems
>that the problem is that it doesn't have entries for all the Ciphers. When
>i use the default client manually, i can chose the ciphers which work with
>OpenSolaris. I've contacted the person who writes the bookmark program
>(it's called JellyFiSSH, and it is super convenient so i hope i can get it
>working) and hopefully he will fix it or tell me how to manually change his
>optioons.
it's really strange that arcfour didn't work, that's in the
default server list on OpenSolaris.
>As far as letting the client pick the right cipher...perhaps that is true.
>I'll also include a note to the person who write jellyfssh asking for it to
>not specify the Cipher at all (or at least have an option) Actually, all
>that happens when you use this program is this: You select a bookmark
>you've made, normally broken into categories, and it opens a normal OSX
>terminal and enters a command based on what you've put in the bookmark....so
>for instace, heres what it enters for one of my servers:
>
>ssh -c 3des -2 -l wonslung 12.12.123.12 -p 22 ;exit
>(changed ip but you get the idea)
>
>so it opens a new teminal for each, which has different fonts and color
>settings...it's quite nice if you use ssh a lot and have a ton of them. I
>really don't like putty....there is a program for linux called SSH Menu
>which is also nice...but it's a gnome program so i don't see it happening
>for osx (though i've installed it on OpenSolaris when i used that as a
>desktop =))
ok, I understand that such app can save some time. There is
definitely room for improvement wrt ciphers, it should not use "-c"
option at all, and it could optionally allow to use it in case that the
shipped client's default cipher list (or the one in your ~/.ssh/config)
does not include all supported ciphers, expecially one that can be the
only cipher working with the remote server.
J.
--
Jan Pechanec
http://blogs.sun.com/janp
_______________________________________________
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
