Re: OpenSSH: Privilege separation and random translator

2011-03-27 Thread Manuel Menal
Le 27 mars 2011 à 15:47, Svante Signell a écrit : > On Sun, 2011-03-27 at 14:43 +0200, Jens Mühlenhoff wrote: > >> 2. Is privilege separation still not working? I disabled it in my ssh server >> config for now. > > I looked at /etc/ssh/sshd_config and found the following: > UsePrivilegeSeparat

Re: OpenSSH: Privilege separation and random translator

2011-03-27 Thread Svante Signell
On Sun, 2011-03-27 at 14:43 +0200, Jens Mühlenhoff wrote: > 2. Is privilege separation still not working? I disabled it in my ssh server > config for now. I looked at /etc/ssh/sshd_config and found the following: UsePrivilegeSeparation yes Don't know what happens if it is enabled and not suppor

Re: OpenSSH: Privilege separation and random translator

2011-03-27 Thread Emilio Pozuelo Monfort
On 27/03/11 13:43, Jens Mühlenhoff wrote: > 1. Is a random translator included in a Debian package? I used the translator > from here: http://kilobug.free.fr/hurd/random-64.tar.gz There is random-egd in debian-ports. Cheers, Emilio -- To UNSUBSCRIBE, email to debian-hurd-requ...@lists.debian.

OpenSSH: Privilege separation and random translator

2011-03-27 Thread Jens Mühlenhoff
Hi, I have a few questions about openssh: 1. Is a random translator included in a Debian package? I used the translator from here: http://kilobug.free.fr/hurd/random-64.tar.gz 2. Is privilege separation still not working? I disabled it in my ssh server config for now. -- Mit freundlichen

Re: openssh-server update woes

2008-12-20 Thread Michael Banck
On Sat, Dec 20, 2008 at 09:36:42PM +, Nigel Horne wrote: > Michael Banck wrote: >> See http://www.gnu.org/software/hurd/hurd/running/debian/faq.html > > Thank you for the reference. This is what the website says: > > "There is no random device by default as no secure implementation has > been

Re: openssh-server update woes

2008-12-20 Thread Nigel Horne
Michael Banck wrote: Hi, On Sat, Dec 20, 2008 at 06:09:39PM +, Nigel Horne wrote: I'm having difficulties updating openssh-server: See http://www.gnu.org/software/hurd/hurd/running/debian/faq.html Thank you for the reference. This is what the website says: "There is no ran

Re: openssh-server update woes

2008-12-20 Thread Michael Banck
Hi, On Sat, Dec 20, 2008 at 06:09:39PM +, Nigel Horne wrote: > I'm having difficulties updating openssh-server: See http://www.gnu.org/software/hurd/hurd/running/debian/faq.html Michael -- To UNSUBSCRIBE, email to debian-hurd-requ...@lists.debian.org with a subject of &quo

openssh-server update woes

2008-12-20 Thread Nigel Horne
I'm having difficulties updating openssh-server: hurd:~# dpkg --configure -a Setting up openssh-server (1:5.1p1-4) ... PRNG is not seeded invoke-rc.d: initscript ssh, action "restart" failed. dpkg: error processing openssh-server (--configure): subprocess post-installation script

Re: openssh

2008-11-01 Thread Michael Banck
On Sat, Nov 01, 2008 at 11:53:32AM +1100, Russell Shaw wrote: > It works now. I assume it's a bug that PriviledgeSeparation doesn't work. Yes. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: openssh

2008-10-31 Thread Russell Shaw
Michael Banck wrote: On Sat, Nov 01, 2008 at 03:07:56AM +1100, Russell Shaw wrote: I can ssh into the hurd box as root ok, but as russell, ssh freezes. That's due to PriviledgeSeperation; turn it off in /etc/ssh/sshd_config or so. Hi, It works now. I assume it's a bug that PriviledgeSeparati

Re: openssh

2008-10-31 Thread Michael Banck
On Sat, Nov 01, 2008 at 03:07:56AM +1100, Russell Shaw wrote: > I can ssh into the hurd box as root ok, but as russell, ssh freezes. That's due to PriviledgeSeperation; turn it off in /etc/ssh/sshd_config or so. Michael -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscr

Re: openssh

2008-10-31 Thread Russell Shaw
Michael Banck wrote: On Sat, Nov 01, 2008 at 01:54:29AM +1100, Russell Shaw wrote: Michael Banck wrote: To use /dev/random, after you've installed random-egd. Probably difficult to try again now when you have copied over some file to it. I saw that there was no /dev/random after i'd installed

Re: openssh

2008-10-31 Thread Russell Shaw
Nigel Horne wrote: Following the discussions of openssh I've tried installing random-egd (btw I have /dev/random even without that package) and got this error: update-rc.d: warning: /etc/init.d/random-egd missing LSB information update-rc.d: see <http://wiki.debian.org/LSBInitScripts&g

Re: openssh

2008-10-31 Thread Nigel Horne
Following the discussions of openssh I've tried installing random-egd (btw I have /dev/random even without that package) and got this error: update-rc.d: warning: /etc/init.d/random-egd missing LSB information update-rc.d: see <http://wiki.debian.org/LSBInitScripts> Starting random-

Re: openssh

2008-10-31 Thread Michael Banck
On Sat, Nov 01, 2008 at 01:54:29AM +1100, Russell Shaw wrote: > Michael Banck wrote: >> To use /dev/random, after you've installed random-egd. Probably >> difficult to try again now when you have copied over some file to it. > > I saw that there was no /dev/random after i'd installed random-egd, >

Re: openssh

2008-10-31 Thread Russell Shaw
Michael Banck wrote: On Sat, Nov 01, 2008 at 01:40:16AM +1100, Russell Shaw wrote: Michael Banck wrote: On Fri, Oct 31, 2008 at 07:49:55PM +1100, Russell Shaw wrote: Setting up random-egd (0.5-0+hurd.1) showtrans: /dev/random: No such file or directory showtrans: /dev/urandom: No such fi

Re: openssh

2008-10-31 Thread Michael Banck
On Sat, Nov 01, 2008 at 01:40:16AM +1100, Russell Shaw wrote: > Michael Banck wrote: >> On Fri, Oct 31, 2008 at 07:49:55PM +1100, Russell Shaw wrote: >>> Setting up random-egd (0.5-0+hurd.1) >>> showtrans: /dev/random: No such file or directory >>> showtrans: /dev/urandom: No such file or dir

Re: openssh

2008-10-31 Thread Russell Shaw
Michael Banck wrote: On Fri, Oct 31, 2008 at 07:49:55PM +1100, Russell Shaw wrote: Setting up random-egd (0.5-0+hurd.1) showtrans: /dev/random: No such file or directory showtrans: /dev/urandom: No such file or directory ... Hrm, the above is just a test whether the translator is alrea

Re: openssh

2008-10-31 Thread Michael Banck
On Fri, Oct 31, 2008 at 07:49:55PM +1100, Russell Shaw wrote: > Setting up random-egd (0.5-0+hurd.1) > showtrans: /dev/random: No such file or directory > showtrans: /dev/urandom: No such file or directory > ... Hrm, the above is just a test whether the translator is already set, it the er

Re: openssh

2008-10-31 Thread Russell Shaw
Barry deFreese wrote: Russell Shaw wrote: Will wrote: On Fri, Oct 31, 2008 at 4:06 AM, Russell Shaw <[EMAIL PROTECTED]> wrote: Will wrote: On Thu, Oct 30, 2008 at 11:27 PM, Russell Shaw <[EMAIL PROTECTED]> wrote: Hi, I did apt-get install openssh-server The install scri

Re: openssh

2008-10-31 Thread Barry deFreese
Russell Shaw wrote: Will wrote: On Fri, Oct 31, 2008 at 4:06 AM, Russell Shaw <[EMAIL PROTECTED]> wrote: Will wrote: On Thu, Oct 30, 2008 at 11:27 PM, Russell Shaw <[EMAIL PROTECTED]> wrote: Hi, I did apt-get install openssh-server The install script bombs out saying: Creat

Re: openssh

2008-10-31 Thread Russell Shaw
Will wrote: On Fri, Oct 31, 2008 at 4:06 AM, Russell Shaw <[EMAIL PROTECTED]> wrote: Will wrote: On Thu, Oct 30, 2008 at 11:27 PM, Russell Shaw <[EMAIL PROTECTED]> wrote: Hi, I did apt-get install openssh-server The install script bombs out saying: Creating SSH2 RSA key; this m

openssh

2008-10-30 Thread Russell Shaw
Hi, I did apt-get install openssh-server The install script bombs out saying: Creating SSH2 RSA key; this may take some time ...PRNG is not seeded I set RANDFILE=/hurd/ext2fs as a source of randomness, but it didn't help. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subje

Re: Bug#436111: openssh-server: password-less login doesn't work for normal user under Hurd

2007-08-05 Thread Colin Watson
On Sun, Aug 05, 2007 at 07:59:11PM +0530, Ritesh Raj Sarraf,,, wrote: > Package: openssh-server > Version: 1:4.6p1-4 > Severity: normal > > Before configuring key based login, I was able to log into the Hurd box > as a normal user. But after adding the key using ssh-copy-id,

[ debian-hurd-Patches-301219 ] FTBFS - openssh-3.8.1p1

2005-05-30 Thread noreply
se (bddebian-guest) Assigned to: Nobody (None) Summary: FTBFS - openssh-3.8.1p1 Initial Comment: Getting unresolved references to __res_query and _dn_expand, and crypt. Added -lresolv and -lcrypt to the rules file. Still getting unresolved errors in XShm*

[ debian-hurd-Patches-301174 ] openssh port fowarding

2005-05-30 Thread noreply
banck) Assigned to: Nobody (None) Summary: openssh port fowarding Initial Comment: Author: Robert Bihlmeyer <[EMAIL PROTECTED]> Source: openssh Status: Applied in #102991, dropped subsequently Categories: linuxism Strip-Level: -p0 --

[ debian-hurd-Patches-301219 ] FTBFS - openssh-3.8.1p1

2005-05-29 Thread noreply
debian-guest) Assigned to: Nobody (None) Summary: FTBFS - openssh-3.8.1p1 Initial Comment: Getting unresolved references to __res_query and _dn_expand, and crypt. Added -lresolv and -lcrypt to the rules file. Still getting unresolved errors in XShm* from

[ debian-hurd-Patches-301174 ] openssh port fowarding

2005-05-29 Thread noreply
Assigned to: Nobody (None) Summary: openssh port fowarding Initial Comment: Author: Robert Bihlmeyer <[EMAIL PROTECTED]> Source: openssh Status: Applied in #102991, dropped subsequently Categories: linuxism Strip-Level: -p0

[ debian-hurd-Patches-301174 ] openssh port fowarding

2005-05-25 Thread noreply
Assigned to: Nobody (None) Summary: openssh port fowarding Initial Comment: Author: Robert Bihlmeyer <[EMAIL PROTECTED]> Source: openssh Status: Applied in #102991, dropped subsequently Categories: linuxism Strip-Level: -p0

[Task #151] Make PrivilegeSeparation work in OpenSSH

2005-03-04 Thread noreply
Task #151 has been updated. Project: debian-hurd Subproject: general Summary: Make PrivilegeSeparation work in OpenSSH Complete: 0% Status: Open Description: Currently, one has to disable PrivilegeSeparation for the OpenSSH daemon in order to make it work on GNU/Hurd. As Debian's ssh pa

[ pkg-hurd-Patches-301219 ] FTBFS - openssh-3.8.1p1

2005-02-22 Thread noreply
debian-guest) Assigned to: Nobody (None) Summary: FTBFS - openssh-3.8.1p1 Initial Comment: Getting unresolved references to __res_query and _dn_expand, and crypt. Added -lresolv and -lcrypt to the rules file. Still getting unresolved errors in XShm* from

[ pkg-hurd-Patches-301174 ] openssh port fowarding

2005-02-16 Thread noreply
Assigned to: Nobody (None) Summary: openssh port fowarding Initial Comment: Author: Robert Bihlmeyer <[EMAIL PROTECTED]> Source: openssh Status: Applied in #102991, dropped subsequently Categories: linuxism Strip-Level: -p0

[ pkg-hurd-Patches-301174 ] openssh port fowarding

2005-02-13 Thread noreply
Assigned to: Nobody (None) Summary: openssh port fowarding Initial Comment: Author: Robert Bihlmeyer <[EMAIL PROTECTED]> Source: openssh Status: Applied in #102991, dropped subsequently Categories: linuxism Strip-Level: -p0

Re: Bug#189425: openssh: with default config, sshd fails on kernels other than Linux > 2.0

2003-09-04 Thread Robert Millan
On Wed, Sep 03, 2003 at 09:35:40AM +0100, Colin Watson wrote: > tags 189425 moreinfo > thanks > > On Mon, Apr 28, 2003 at 07:14:36PM +0200, Robert Millan wrote: > > retitle 189425 PrivSep option doesn't work on GNU/Hurd (pending patch) > > thanks > > Hi, > > Is anyone looking at this? I would ra

Re: Bug#189425: openssh: with default config, sshd fails on kernels other than Linux > 2.0

2003-09-03 Thread Colin Watson
tags 189425 moreinfo thanks On Mon, Apr 28, 2003 at 07:14:36PM +0200, Robert Millan wrote: > retitle 189425 PrivSep option doesn't work on GNU/Hurd (pending patch) > thanks > > On Mon, Apr 28, 2003 at 01:50:26AM +0100, Colin Watson wrote: > > [removing debian-bsd] > > Privsep should on the whole

openssl and openssh

2002-10-13 Thread Marcus Brinkmann
Hi, can someone take another look at openssl and openssh and see what patches they require, and work it out with the Debian maintainer? It seems that the discussion with upstream a year ago or so didn't lead to a result, so it needs to be picked up again. Thanks, Marcus -- `Rhubarb

Re: patches for openssh

2001-08-05 Thread Robert Bihlmeyer
James Morrison <[EMAIL PROTECTED]> writes: > I'm looking for the openssh patches for HURD. They aren't on Robbe's > page anymore. They are in the official Debian source now => "apt-get source openssh", or (if apt is not available) from ftp.debian.org/deb

Re: patches for openssh

2001-08-03 Thread Marcus Brinkmann
On Fri, Aug 03, 2001 at 07:39:56AM -0700, James Morrison wrote: > Humm, is included as well as but it still > says > sa->sa_len is undefined. doesn't include > sys/socket.h includes bits/socket.h, which includes bits/sockaddr.h Marcus -- `Rhubarb is no Egyptian god.' Debian http://www.debi

Re: patches for openssh

2001-08-03 Thread Neal H Walfield
> > > I also can't compile parted because the current hurd package > > > doesn't seem to link libstore to libshouldbeinlibc. > > > > Neal will take care of parted, I think. > > This isn't actually a parted problem, Unless you missed something, I have not finished the port. The problem is that

Re: patches for openssh

2001-08-03 Thread James Morrison
--- Marcus Brinkmann <[EMAIL PROTECTED]> wrote: > On Thu, Aug 02, 2001 at 07:08:13PM -0700, James Morrison wrote: > > Also to get the Slang frontend for debconf to work, i've had to > > add a link from libslang.so.1 to libslang.so > > Which package contains the program/library which contains the >

Re: patches for openssh

2001-08-03 Thread Marcus Brinkmann
On Thu, Aug 02, 2001 at 07:08:13PM -0700, James Morrison wrote: > Also to get the Slang frontend for debconf to work, i've had to > add a link from libslang.so.1 to libslang.so Which package contains the program/library which contains the dependency on libslang.so ? This needs to be recompiled.

Re: patches for openssh

2001-08-03 Thread Neal H Walfield
> I also can't compile parted because the current hurd package > doesn't seem to link libstore to libshouldbeinlibc. I will be working on this soon; this is one of a few known issues. > This one will go on bug-hurd if no one tells me it's my fault but > bits/sockaddr.h defines _HAVE_SA_LEN but

patches for openssh

2001-08-02 Thread James Morrison
Hi, I'm looking for the openssh patches for HURD. They aren't on Robbe's page anymore. Also to get the Slang frontend for debconf to work, i've had to add a link from libslang.so.1 to libslang.so I also can't compile parted because the current hurd package doesn&#

Re: openssh on hurd

2001-05-29 Thread Roland McGrath
Please give more details on what problems you are having. The setrlimit interfaces are there and using them is not a problem. It's just the case that almost none of the limits actually limit anything, and the settings are not inherited on exec. But just making the calls should work.

Re: openssh on hurd

2001-05-29 Thread Igor Khavkine
On Tue, May 29, 2001 at 01:03:37PM -0700, James Morrison wrote: > I haven't gone and made a patch but openssh 2.9 uses setrlimit(). > > It doesn't seem to be in the porting FAQ but it would be a nice place > to have information of getting around setrlimit(). >

Re: openssh on hurd

2001-05-29 Thread James Morrison
I haven't gone and made a patch but openssh 2.9 uses setrlimit(). It doesn't seem to be in the porting FAQ but it would be a nice place to have information of getting around setrlimit(). = James Morrison University of Waterloo Computer Science - Digital Hard

Re: openssh on hurd

2001-05-28 Thread Robert Bihlmeyer
Jérôme Magnin <[EMAIL PROTECTED]> writes: > finally openssh compiled ok, but the problem is that it lacks a random > number generator to create the seeds. In my experience it can cope with gathering randomness from programs reasonably well. It's not terribly secure, but anywa

Re: openssh on hurd

2001-05-25 Thread Jérôme Magnin
Ok I ll have a look at this during the WE. Thanks I ll let you know the results. Jerome On 25 May 2001 13:27:10 +0200, Oystein Viggen wrote: > Quoth Jérôme Magnin: > > > finally openssh compiled ok, but the problem is that it lacks a random > > number generator to create

Re: openssh on hurd

2001-05-25 Thread Oystein Viggen
Quoth Jérôme Magnin: > finally openssh compiled ok, but the problem is that it lacks a random > number generator to create the seeds. I read that I could use prngd but > I had troubles as well. > > I think I read something on this topic once on the mailing list, but I > can

openssh on hurd

2001-05-25 Thread Jérôme Magnin
Hi everybody I just re-installed the HURD yesterday, and successfully recompiled apache. Now I want to use openssh on this box and if possible the latest version. I had some troubles with MAXHOSTNAMELEN which I defined as 256 as told to me by some guys from #hurdfr on opn . finally openssh