-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 but... I'm trying to disable ssh1, completely. I don't want sshd2 to accept the connection at all.
- -----Original Message----- From: Ben Russo [mailto:[EMAIL PROTECTED]] Sent: Friday, January 03, 2003 3:40 PM To: [EMAIL PROTECTED] Subject: Re: SSHD question You need a line that says: Protocol 2,1 You will also need host keys for both protocols, my sshd_config shows:# HostKey for protocol version 1 #HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 #HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_dsa_key And the permissions on all the files listed above have to be correct. For me it works with: -rw------- 1 root root 2449 Aug 14 00:08 sshd_config - -rw-r--r-- 1 root root 1137 Aug 14 00:08 ssh_config - -rw------- 1 root root 88039 Aug 14 00:08 moduli - -rw-r--r-- 1 root root 319 Dec 23 18:10 ssh_host_key.pub - -rw------- 1 root root 515 Dec 23 18:10 ssh_host_key - -rw-r--r-- 1 root root 210 Dec 23 18:10 ssh_host_rsa_key.pub - -rw------- 1 root root 883 Dec 23 18:10 ssh_host_rsa_key - -rw-r--r-- 1 root root 590 Dec 23 18:10 ssh_host_dsa_key.pub - -rw------- 1 root root 668 Dec 23 18:10 ssh_host_dsa_key On Fri, 2003-01-03 at 14:25, Burke, Thomas G. wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > After the big wipeout, I've installed ssh2 from ssh.com... I > recall that ssh1 has some serious security issues with it, and that > ssh1 > compatibility allows these bugs in, or some such. What are the > lines I need to put into the sshd2_config file to disallow a client > to use ssh1? > > Also, anyone have an init.d style script I could use for starting & > stopping the daemon? > > Thanks, > Tom > > -----BEGIN PGP SIGNATURE----- > Version: PGP Personal Privacy 6.5.3 > > iQA/AwUBPhXjbNPjBkUEZx5AEQJvkgCeN5+RQZHyaKY2qqYqZq9cvHii09UAoIUh > uclxpXG0W+p4Zv+njScWhGXF > =tEvR > -----END PGP SIGNATURE----- > > - -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQA/AwUBPhX7OtPjBkUEZx5AEQKEcACdGT858MJJBNJvqBAFaRoQp8n9tsAAn3a6 HyznYLYDhhOXwR9cBiz6QJ76 =j4aW -----END PGP SIGNATURE----- -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
