RE: Is RSA authentication on SSH still broken?

2002-11-11 Thread Harig, Mark A.
chmod 700 ~ \ ^^^ This is your problem. By setting home and .ssh to 700 you disallow sshd to stat() ~/.ssh. Cygwin has two chances to retrieve information about a file or directory, by either calling FindFileFirst() or by trying to open the file and calling

Re: Is RSA authentication on SSH still broken?

2002-11-11 Thread Max Bowsher
Harig, Mark A. [EMAIL PROTECTED] wrote: OK. So, it appears that Cygwin users of openssh have one of two options: 1. chmod 700 ~ chgrp 18 ~/.ssh chmod 750 ~/.ssh or 2. chmod 755 ~ chmod 700 ~/.ssh Do you have a recommendation on which of these two options is more secure?

RE: Is RSA authentication on SSH still broken?

2002-11-11 Thread Harig, Mark A.
Harig, Mark A. [EMAIL PROTECTED] wrote: OK. So, it appears that Cygwin users of openssh have one of two options: 1. chmod 700 ~ chgrp 18 ~/.ssh chmod 750 ~/.ssh or 2. chmod 755 ~ chmod 700 ~/.ssh Do you have a recommendation on which of these two options is

RE: Is RSA authentication on SSH still broken?

2002-11-11 Thread Igor Pechtchanski
On Mon, 11 Nov 2002, Harig, Mark A. wrote: chmod 700 ~ \ ^^^ This is your problem. By setting home and .ssh to 700 you disallow sshd to stat() ~/.ssh. Cygwin has two chances to retrieve information about a file or directory, by either calling

Re: Is RSA authentication on SSH still broken?

2002-11-11 Thread Corinna Vinschen
On Mon, Nov 11, 2002 at 10:57:22AM -0500, Harig, Mark A. wrote: Harig, Mark A. [EMAIL PROTECTED] wrote: I have been using option 1. My question comes from the fact that Corinna Vinschen recommended that ~/.ssh be set to 700 (which is what 'set-keygen' sets it to) and that she had pointed to

Re: Is RSA authentication on SSH still broken?

2002-11-08 Thread Corinna Vinschen
On Thu, Nov 07, 2002 at 06:54:48PM -0500, Harig, Mark A. wrote: I must be missing a piece of information. Setting the permissions of ~/.ssh to 700 causes ssh to require me to enter a password, that is, the encryption-key processing is failing. Setting the permissions of ~/.ssh to 750 (if

RE: Is RSA authentication on SSH still broken?

2002-11-08 Thread Harig, Mark A.
On Thu, Nov 07, 2002 at 06:54:48PM -0500, Harig, Mark A. wrote: I must be missing a piece of information. Setting the permissions of ~/.ssh to 700 causes ssh to require me to enter a password, that is, the encryption-key processing is failing. Setting the permissions of ~/.ssh to 750

Re: Is RSA authentication on SSH still broken?

2002-11-08 Thread Max Bowsher
Harig, Mark A. [EMAIL PROTECTED] wrote: On Thu, Nov 07, 2002 at 06:54:48PM -0500, Harig, Mark A. wrote: I must be missing a piece of information. Setting the permissions of ~/.ssh to 700 causes ssh to require me to enter a password, that is, the encryption-key processing is failing.

Re: Is RSA authentication on SSH still broken?

2002-11-08 Thread Corinna Vinschen
On Fri, Nov 08, 2002 at 11:37:11AM -0500, Harig, Mark A. wrote: chmod 700 ~ \ ^^^ This is your problem. By setting home and .ssh to 700 you disallow sshd to stat() ~/.ssh. Cygwin has two chances to retrieve information about a file or directory, by either calling

RE: Is RSA authentication on SSH still broken?

2002-11-07 Thread Harig, Mark A.
Thank you for the clarification! This presents an interesting situation. Users who run 'ssh-keygen' (either directly, or indirectly using 'ssh-host-config'), find that they are not able to run ssh because of the permissions of ~/.ssh/ (and, later, ~/.ssh/authorized_keys*), even though their

Re: Is RSA authentication on SSH still broken?

2002-11-07 Thread Corinna Vinschen
On Thu, Nov 07, 2002 at 11:51:16AM -0500, Harig, Mark A. wrote: Thank you for the clarification! This presents an interesting situation. Users who run 'ssh-keygen' (either directly, or indirectly using 'ssh-host-config'), find that they are not able to run ssh because of the permissions of

RE: Is RSA authentication on SSH still broken?

2002-11-07 Thread Harig, Mark A.
First, the directory permission doesn't restrict the access for SYSTEM due to the standard Bypass traverse checking setting on NT. So setting the .ssh permissions to 0700 is perfectly fine. I must be missing a piece of information. Setting the permissions of ~/.ssh to 700 causes ssh to

RE: Is RSA authentication on SSH still broken?

2002-11-06 Thread Antonio Bemfica
authentication on SSH still broken? Hello Could someone clarify whether RSA authentication is still not possible when running SSH as the SYSTEM user? I have Cygwin 1.3.14-1 and OpenSSH 3.4p1-5 and can only login via password authentication (I am familiar with the process to effect RSA

RE: Is RSA authentication on SSH still broken?

2002-11-06 Thread Harig, Mark A.
chmod 755 $HOME/.ssh chmod 644 $HOME/.ssh/authorized_keys* I had $HOME set to 700 and authorized_keys* to 600 before and that somehow broke RSA authentication - it is odd that stricter permissions would cause that. I suppose this is because the SYSTEM or sshd user need to read the keys

Re: Is RSA authentication on SSH still broken?

2002-11-06 Thread Corinna Vinschen
On Wed, Nov 06, 2002 at 07:19:40PM -0500, Harig, Mark A. wrote: chmod 755 $HOME/.ssh chmod 644 $HOME/.ssh/authorized_keys* I had $HOME set to 700 and authorized_keys* to 600 before and that somehow broke RSA authentication - it is odd that stricter permissions would cause that. I

Is RSA authentication on SSH still broken?

2002-11-05 Thread Antonio Bemfica
Hello Could someone clarify whether RSA authentication is still not possible when running SSH as the SYSTEM user? I have Cygwin 1.3.14-1 and OpenSSH 3.4p1-5 and can only login via password authentication (I am familiar with the process to effect RSA authentication under Unix). I have also

RE: Is RSA authentication on SSH still broken?

2002-11-05 Thread Harig, Mark A.
] Sent: Tuesday, November 05, 2002 5:32 PM To: [EMAIL PROTECTED] Subject: Is RSA authentication on SSH still broken? Hello Could someone clarify whether RSA authentication is still not possible when running SSH as the SYSTEM user? I have Cygwin 1.3.14-1 and OpenSSH 3.4p1-5 and can only

RE: Is RSA authentication on SSH still broken?

2002-11-05 Thread Harig, Mark A.
5:32 PM To: [EMAIL PROTECTED] Subject: Is RSA authentication on SSH still broken? Hello Could someone clarify whether RSA authentication is still not possible when running SSH as the SYSTEM user? I have Cygwin 1.3.14-1 and OpenSSH 3.4p1-5 and can only login via password authentication