Mailing List Archive

/etc/ssh/shosts.equiv ignored?
I'm trying to replace ssh 1.2.27 with openssh 1.2.1-pre*

It seems that a openssh client accessing any openssh/ssh server I've setup
always results in a password prompt.

It also seems that a openssh server requires ssh clients to provide a
password regardless of the entries in the /etc/ssh/shosts.equiv file. If
I shut off the openssh server and run a ssh server then normal ssh client
can connect without password prompts, openssh client still prompt for
password.

One other oddity I've noticed in is using openssh as a rsh replacement for
pine/imap. Setting up pine to use imap via ssh replacement of rsh worked
fine. With openssh it always displays the password prompt and corrupts
the screen.

If I've overlooked something in the man pages (which are corrupted on a
Solaris 2.6 install, nroff problem?) please point me at it.

Also, what are the legal options for me providing patches to openssh since
I'm in the US. I've have some troubles with Solaris 2.6 installs with
pre24 and pre19 but don't care to waste time debugging something I can't
contribute back to the project.

Thanks,
James

ssh = the product from www.ssh.fi

->->->->->->->->->->->->->->->->->->---<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<
James Thompson 138 Cardwell Hall Manhattan, Ks 66506 785-532-0561
Kansas State University Department of Mathematics
->->->->->->->->->->->->->->->->->->---<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<-<
Re: /etc/ssh/shosts.equiv ignored? [ In reply to ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 4 Jan 2000, James Thompson wrote:

>
> I'm trying to replace ssh 1.2.27 with openssh 1.2.1-pre*
>
> It seems that a openssh client accessing any openssh/ssh server I've setup
> always results in a password prompt.
>
> It also seems that a openssh server requires ssh clients to provide a
> password regardless of the entries in the /etc/ssh/shosts.equiv file. If
> I shut off the openssh server and run a ssh server then normal ssh client
> can connect without password prompts, openssh client still prompt for
> password.

Have you enabled "RhostsRSAAuthentication" in your sshd_config?

> One other oddity I've noticed in is using openssh as a rsh replacement for
> pine/imap. Setting up pine to use imap via ssh replacement of rsh worked
> fine. With openssh it always displays the password prompt and corrupts
> the screen.

What auth scheme are you using here?

> If I've overlooked something in the man pages (which are corrupted on a
> Solaris 2.6 install, nroff problem?) please point me at it.
>
> Also, what are the legal options for me providing patches to openssh since
> I'm in the US. I've have some troubles with Solaris 2.6 installs with
> pre24 and pre19 but don't care to waste time debugging something I can't
> contribute back to the project.

The approach so far has been to allow patches from the USA so long as
they are not crypto related.

Disclaimer: I am not a lawyer and this is not legal advice.

Regards,
Damien Miller

- --
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE4dABrormJ9RG1dI8RAk+TAKCl3nME006L5l8Ki6wtfuIgevcO0wCg0Om7
V4JU0AwUr+1v7jSPWC6t280=
=jYRJ
-----END PGP SIGNATURE-----