On Monday, March 18, 2002, at 09:11 PM, Toby Thain wrote:
>
> On Monday, March 18, 2002, at 01:41 AM, J.H.M. Dassen (Ray) wrote:
>
>> On Sun, Mar 17, 2002 at 11:03:51 +1100, Toby Thain wrote:
>>> I've just upgraded one Debian 2.2 machine from stable to testing
>>> and other
>>> 2.2 stable machines can't ssh into it ("Disconnecting: Bad packet
>>> length
>>> 1349676916").
>>
>> The SSH in stable only supports version 1 of the SSH protocol; if you
>> configure your "testing" machine to accept that older version of the
>> protocol (by putting "Protocol 2,1" in /etc/ssh/sshd_config and
>> restarting
>> ssh), SSH-ing from your stable machines works.
The solution to my problem (Debian 2.2 ssh1 client not being able to
connect to Debian 3.0 sshd) involved several changes to
/etc/ssh/sshd_config:
- firstly the Protocol line as mentioned above (I think this was OK
as distributed in "testing")
- a line "HostKey /etc/ssh/ssh_host_key" needed to be added (after
the two other HostKey lines for ssh2)
- I also regenerated the ssh1 host keys (ssh-keygen -t rsa1 -N "" -f
/etc/ssh/ssh_host_key). Not forgetting killall -HUP sshd (dangerous
to do remotely, I guess, in case the daemon doesn't come back up?)
Then my ssh1 client (in Debian 2.2 stable) was able to connect.
Thanks everyone for your suggestions, although futzing with apt-get
was getting me nowhere.
Toby
>
> This didn't work for me (first thing I tried).
>
>>
>>> So I'd like to upgrade ssh on the client machine to the "testing"
>>> version.
>>> But I don't know how to do this other than adding "testing" to the
>>> apt-get
>>> sources, dselect upgrade, etc., which will upgrade everything. Can
>>> anyone
>>> explain to me how to be more selective?
>>
>> You'll need testing's apt (plus its depencencies) for that. The
>> following
>> should work (though I'm not aware of people actually using this
>> configuration as most simply fully upgrade to testing, so you may
>> want to
>> use the "-s" flag to apt-get to see what it intends to do before
>> actually
>> doing these steps):
>> - add "testing" entries to /etc/apt/sources.list in addition to the
>> entries
>> for "stable"
>> - "apt-get update"
>> - "apt-get install apt"
>> - create an /etc/apt/preferences with contents
>> Package: *
>> Pin: release a=stable
>> to have apt default to the stable versions
>> - install testing's ssh by requesting it explicitly:
>> "apt-get -t testing install ssh"
>
> This didn't work for me either:
>
> spaz:~# apt-get update
> Hit http://non-us.debian.org testing/non-US/main Packages
> Hit http://non-us.debian.org testing/non-US/main Release
> Hit http://non-us.debian.org testing/non-US/contrib Packages
> Hit http://non-us.debian.org testing/non-US/non-free Packages
> Hit http://non-us.debian.org testing/non-US/non-free Release
> Hit http://non-us.debian.org stable/non-US/main Sources
> Hit http://non-us.debian.org stable/non-US/main Release
> Hit http://non-us.debian.org stable/non-US/contrib Sources
> Hit http://non-us.debian.org stable/non-US/contrib Release
> Hit http://non-us.debian.org stable/non-US/non-free Sources
> Hit http://non-us.debian.org stable/non-US/non-free Release
> Reading Package Lists... Done
> Building Dependency Tree... Done
> spaz:~# apt-get install apt
> Reading Package Lists... Done
> Building Dependency Tree... Done
> Sorry, apt is already the newest version
> 0 packages upgraded, 0 newly installed, 0 to remove and 5 not upgraded.
> spaz:~# vi /etc/apt/preferences
>
> Package: *
> Pin: release a=stable
> ~
> /etc/apt/preferences: new file: 2 lines, 33 characters
> spaz:~# apt-get -t testing install ssh
> E: Command line option 't' [from -t] is not known.
> spaz:~#
>
> Naturally the next thing I did was "man apt-get" but that didn't
> clarify.
>
> Toby
>
>
>>
>> HTH,
>> Ray
>> --
>> Professionele hackers kunnen uw bedrijf veel schade berokkenen.
>> Snail-mail spam van het Nederlands Normalisatie-Instituut
>>
>>
>> --
>> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>> with a subject of "unsubscribe". Trouble? Contact
>> [EMAIL PROTECTED]
>>
>>
>
>
> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>
>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
