OT: Security question (openssl vs openssh)

2011-05-03 Thread Mark Moellering
Everyone, I am looking into setting up a webserver to hold some very sensitive information. I am trying to figure out which is more secure, forcing any web connections to be done using an ssh tunnel or forcing ssl. I have not been able to figure out if one is definitively much more secure

Re: OT: Security question (openssl vs openssh)

2011-05-03 Thread Maxim Khitrov
. Thanks in advance Mark Moellering I don't think there is any extra security in tunneling an HTTP connection over SSH. Use authentication is a different matter, but the encryption algorithms are the same. Most web servers have an option of configuring what ciphers are allowed (same as OpenSSH

Re: OT: Security question (openssl vs openssh)

2011-05-03 Thread Jon Radel
On 5/3/11 10:22 AM, Mark Moellering wrote: Everyone, I am looking into setting up a webserver to hold some very sensitive information. I am trying to figure out which is more secure, forcing any web connections to be done using an ssh tunnel or forcing ssl. I have not been able to figure out

Re: OT: Security question (openssl vs openssh)

2011-05-03 Thread Bill Campbell
On Tue, May 03, 2011, Mark Moellering wrote: Everyone, I am looking into setting up a webserver to hold some very sensitive information. I am trying to figure out which is more secure, forcing any web connections to be done using an ssh tunnel or forcing ssl. I have not been able to

Re: Updating OpenSSH

2011-03-18 Thread krad
On 17 March 2011 11:52, Robert Huff roberth...@rcn.com wrote: Carmel writes: It is part of the base system. I don't know if it has a true maintainer. In any case, I would need commit privileges which I don't and never expect to have and have no desire to acquire.. I do not

Re: Updating OpenSSH

2011-03-17 Thread krad
of FreeBSD? Currently, no-- TRUNK has: http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/src/crypto/openssh/version.h Revision 1.41: download - view: text, markup, annotated - select for diffs Thu Nov 11 11:46:19 2010 UTC (4 months ago) by des Branches: MAIN CVS tags: HEAD Diff

Re: Updating OpenSSH

2011-03-17 Thread Carmel
On Thu, 17 Mar 2011 10:46:44 + krad kra...@gmail.com articulated: [snip] a combination of time and limited resources I guess. If it bugs you that much why dont you volunteer yourself to maintain it, i'm sure that if you dont feel competent enough at present, people will help and mentor

Re: Updating OpenSSH

2011-03-17 Thread Robert Huff
Carmel writes: It is part of the base system. I don't know if it has a true maintainer. In any case, I would need commit privileges which I don't and never expect to have and have no desire to acquire.. I do not believe that is correct; a fair number of people contribute

Updating OpenSSH

2011-03-16 Thread Carmel
I was just wondering about the version of SSH used on FreeBSD. According to the OpenSSH page: OpenSSH 5.8/5.8p1 released February 4, 2011 [contains security fix] Now, according to my system, FreeBSD-8.2, I have this version: OpenSSH_5.4p1 FreeBSD-20100308, OpenSSL 0.9.8q 2 Dec 2010 # openssl

Re: Updating OpenSSH

2011-03-16 Thread Matthew Seaman
On 16/03/2011 13:38, Carmel wrote: I was just wondering about the version of SSH used on FreeBSD. According to the OpenSSH page: OpenSSH 5.8/5.8p1 released February 4, 2011 [contains security fix] Now, according to my system, FreeBSD-8.2, I have this version: OpenSSH_5.4p1 FreeBSD

Re: Updating OpenSSH

2011-03-16 Thread Carmel
On Wed, 16 Mar 2011 14:35:09 + Matthew Seaman m.sea...@infracaninophile.co.uk articulated: On 16/03/2011 13:38, Carmel wrote: I was just wondering about the version of SSH used on FreeBSD. According to the OpenSSH page: OpenSSH 5.8/5.8p1 released February 4, 2011 [contains

Re: Updating OpenSSH

2011-03-16 Thread Chuck Swiger
On Mar 16, 2011, at 11:24 AM, Carmel wrote: OK, then does that mean that the latest version will be used in the still not released 9 version of FreeBSD? Currently, no-- TRUNK has: http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/src/crypto/openssh/version.h Revision 1.41: download - view

Re: Updating OpenSSH

2011-03-16 Thread Carmel
/cgi/cvsweb.cgi/~checkout~/src/crypto/openssh/version.h Revision 1.41: download - view: text, markup, annotated - select for diffs Thu Nov 11 11:46:19 2010 UTC (4 months ago) by des Branches: MAIN CVS tags: HEAD Diff to: previous 1.40: preferred, colored Changes since revision 1.40: +3 -3 lines

Re: OpenSSH could be faster...then why don't they path it??

2011-02-07 Thread David Brodbeck
On Sun, Feb 6, 2011 at 5:42 AM, Bill Moran wmo...@potentialtech.com wrote: Also, I'm having trouble understanding how people like that get grants to do work like that.  On the one hand, they obviously know enough about cryptography to make improvements.  On the other hand, they can't seem to

Re: OpenSSH could be faster...then why don't they path it??

2011-02-07 Thread Jerry
On Mon, 7 Feb 2011 11:12:45 -0800 David Brodbeck g...@gull.us articulated: On Sun, Feb 6, 2011 at 5:42 AM, Bill Moran wmo...@potentialtech.com wrote: Also, I'm having trouble understanding how people like that get grants to do work like that.  On the one hand, they obviously know enough

OpenSSH could be faster...then why don't they path it??

2011-02-06 Thread kellyremo
https://www.psc.edu/networking/projects/hpn-ssh/hpn-v-ssh-tput.jpg SCP and the underlying SSH2 protocol implementation in OpenSSH is network performance limited by statically defined internal flow control buffers. These buffers often end up acting as a bottleneck for network throughput of SCP

Re: OpenSSH could be faster...then why don't they path it??

2011-02-06 Thread Bill Moran
In response to kellyremo kellyr...@zoho.com: https://www.psc.edu/networking/projects/hpn-ssh/hpn-v-ssh-tput.jpg SCP and the underlying SSH2 protocol implementation in OpenSSH is network performance limited by statically defined internal flow control buffers. These buffers often end up

Re: OpenSSH could be faster...then why don't they path it??

2011-02-06 Thread Chad Perrin
discussing OpenSSH rather than OpenSSL. Am I mistaken? They are not the same project. -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] pgpYQp3xqsNOx.pgp Description: PGP signature

libutil.so.8 - libutil.so.9, WAS: openssh-portable fails to build on ia64, sparc

2010-01-27 Thread Anton Shterenlikht
I didn't get any reply from ports@, so maybe somebody here can help - Forwarded message from Anton Shterenlikht me...@bristol.ac.uk - maybe this has been discussed already, my apologies in that case. on current r203046 I'm trying to rebuild openssh-portable-5.2.p1_2,1 due to an upgrade

Re: libutil.so.8 - libutil.so.9, WAS: openssh-portable fails to build on ia64, sparc

2010-01-27 Thread Jason
...@bristol.ac.uk - maybe this has been discussed already, my apologies in that case. on current r203046 I'm trying to rebuild openssh-portable-5.2.p1_2,1 due to an upgrade from libutil.so.8 to libutil.so.9 I get this error on sparc64 and ia64 (don't have any other arch to check): === Building

Re: libutil.so.8 - libutil.so.9, WAS: openssh-portable fails to build on ia64, sparc

2010-01-27 Thread Anton Shterenlikht
discussed already, my apologies in that case. on current r203046 I'm trying to rebuild openssh-portable-5.2.p1_2,1 due to an upgrade from libutil.so.8 to libutil.so.9 I get this error on sparc64 and ia64 (don't have any other arch to check): === Building for openssh-portable-5.2.p1_2,1 cc

FreeBSD 8.0 updated OpenSSH version

2009-07-17 Thread Jerry
I noticed on the FreeBSD 8.0 page that OpenSSH is being updated from 4.5p1 to 5.1p1. [MERGED]; however, according to the OpenSSH page, the present version is OpenSSH 5.2/5.2p1 released February 23, 2009. I was just wondering why the FreeBSD team decided not to go with the latest stable version

OpenSSH

2009-05-22 Thread Jerry
I have the following version of SSH installed: OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004 I noticed an article regarding a flaw in OpenSSH below version 5.2. The article is here: http://news.zdnet.com/2100-9595_22-303182.html Is this anything to worry about? Does the FreeBSD

Re: OpenSSH

2009-05-22 Thread Eric
Jerry wrote: I have the following version of SSH installed: OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004 I noticed an article regarding a flaw in OpenSSH below version 5.2. The article is here: http://news.zdnet.com/2100-9595_22-303182.html Is this anything to worry about

Openssh + pam_krb5 doesn't establish credential cache.

2008-11-24 Thread Viktar Sakovich
Hi. I trying to setup ssh+pam_krb5 for authentication and establishment of credential cache on FreeBSD 6.3 against MIT kerberos. Everything is ok with authentication, but not with establishment of credential cache by pam_krb5. I tried different combinations of modules in /etc/pam.d/sshd

Upgrade base openssh

2008-11-11 Thread Matiss
Hi, Is there a way to just upgrade base openssh without breaking a lot of things? I have an old 5.4 stable box, and I would like to get openssh up to date, since it is running sshd service, and it is not possible to allow it only from defined ips. Or I just have to eat it and upgrade the whole

Re: Upgrade base openssh

2008-11-11 Thread Mel
On Tuesday 11 November 2008 13:38:11 Matiss wrote: Hi, Is there a way to just upgrade base openssh without breaking a lot of things? I have an old 5.4 stable box, and I would like to get openssh up to date, since it is running sshd service, and it is not possible to allow it only from defined

Re: Hashes in scp usernames (OpenSSH bug 472)

2008-11-09 Thread Manolis Kiagias
Christopher Key wrote: Hello, I've come upon OpenSSH bug 472, whereby scp refuses usernames containing a '#' character, dieing with 'invalid user name'. Both rsync and ssh accept such usernames, and after looking at /usr/src/crypto/openssh/scp.c, it would appear that scp also allows

Hashes in scp usernames (OpenSSH bug 472)

2008-11-09 Thread Christopher Key
Hello, I've come upon OpenSSH bug 472, whereby scp refuses usernames containing a '#' character, dieing with 'invalid user name'. Both rsync and ssh accept such usernames, and after looking at /usr/src/crypto/openssh/scp.c, it would appear that scp also allows such usernames for the source

Can't build all in /usr/src/crypto/openssh

2008-09-25 Thread Andrew Falanga
Hi, I've just updated my sources for 6.2-RELEASE. It took me from p11 to p12. The changes were quite minor. Only changes were to UPDATING (obviously), channels.c in the openssh directory and a newvers.sh file in /usr/src/conf. So, instead of rebuilding world, since the UPDATING notes say

Re: Can't build all in /usr/src/crypto/openssh

2008-09-25 Thread Mel
On Thursday 25 September 2008 17:33:56 Andrew Falanga wrote: Hi, I've just updated my sources for 6.2-RELEASE. It took me from p11 to p12. The changes were quite minor. Only changes were to UPDATING (obviously), channels.c in the openssh directory and a newvers.sh file in /usr/src/conf

Re: Can't build all in /usr/src/crypto/openssh

2008-09-25 Thread Andrew Falanga
in the openssh directory and a newvers.sh file in /usr/src/conf. So, instead of rebuilding world, since the UPDATING notes say that the changes only affect sshd, I'm following the instructions in the handbook for section, 23.4.14.1. Do I need to re-make the world for every change

Re: Can't build all in /usr/src/crypto/openssh

2008-09-25 Thread Mel
quite minor. Only changes were to UPDATING (obviously), channels.c in the openssh directory and a newvers.sh file in /usr/src/conf. So, instead of rebuilding world, since the UPDATING notes say that the changes only affect sshd, I'm following the instructions in the handbook for section

Re: Can't build all in /usr/src/crypto/openssh

2008-09-25 Thread Andrew Falanga
Bad choice of words on my part. It won't rebuild openssl, if you still have /usr/obj/usr/src/* from last time. But it will go through the motions to see if stuff needs to be rebuilt. It will only rebuild libssh and anything that uses libssh: # find . -name 'Makefile' -exec grep channels.c {}

How to use rxvt-unicode + OpenSSH

2008-08-29 Thread आशीष शुक्ल Ashish Shukla
Hi, I'm experiencing an issue related to the terminal capabilities and OpenSSH. I've installed x11/rxvt-unicode port on my client and server. When I login to my server from urxvt (running on client), I get messages related to terminal capabilities: 88 abbe [~] chateau% ssh

Re: Problem building openssh-portable with KERBEROS, GSSAPI, KERB_GSSAPI.

2008-07-31 Thread Lowell Gilbert
Valeriu Mutu [EMAIL PROTECTED] writes: I am trying to build 'openssh-portable' from ports (security/openssh-portable/) with the following configuration options: PAM=on Enable pam(3) support TCP_WRAPPERS=on Enable tcp_wrappers support LIBEDIT=on Enable readline support

Problem building openssh-portable with KERBEROS, GSSAPI, KERB_GSSAPI.

2008-07-30 Thread Valeriu Mutu
Hi all, I am trying to build 'openssh-portable' from ports (security/openssh-portable/) with the following configuration options: PAM=on Enable pam(3) support TCP_WRAPPERS=on Enable tcp_wrappers support LIBEDIT=on Enable readline support to sftp(1) KERBEROS=on Enable

security/openssh-portable

2008-03-11 Thread Philip M. Gollucci
Hi, I'm setting up a 'chrooted' SFTP only set of users: /etc/make.conf: .if ${.CURDIR:M*/usr/ports/security/openssh-portable*} WITH_SUID_SSH =yes WITH_OPENSSH_CHROOT =yes WITH_HPN =yes WITH_OVERWRITE_BASE =yes .endif /etc/rc.conf: sshd_enable=NO openssh_enable

Re: security/openssh-portable

2008-03-11 Thread Jerry McAllister
On Tue, Mar 11, 2008 at 06:08:44PM -0400, Philip M. Gollucci wrote: Hi, I'm setting up a 'chrooted' SFTP only set of users: /etc/make.conf: .if ${.CURDIR:M*/usr/ports/security/openssh-portable*} WITH_SUID_SSH =yes WITH_OPENSSH_CHROOT =yes WITH_HPN =yes

Re: security/openssh-portable

2008-03-11 Thread Philip M. Gollucci
Feb 2007 debug1: Remote protocol version 1.99, remote software version OpenSSH_4.7p1-hpn12v20 FreeBSD-openssh-portable-overwrite-base-4.7.p1_1,1 debug1: match: OpenSSH_4.7p1-hpn12v20 FreeBSD-openssh-portable-overwrite-base-4.7.p1_1,1 pat OpenSSH* debug2: channel 0: open confirm rwindow 0 rmax

Re: security/openssh-portable

2008-03-11 Thread Jerry McAllister
-openssh-portable-overwrite-base-4.7.p1_1,1 debug1: match: OpenSSH_4.7p1-hpn12v20 FreeBSD-openssh-portable-overwrite-base-4.7.p1_1,1 pat OpenSSH* debug2: channel 0: open confirm rwindow 0 rmax 32768 Request for subsystem 'sftp' failed on channel 0

openssh no X forwarding

2007-07-31 Thread Noah
Xt error: Can't open display: xterm: DISPLAY is not set [access1 ~]$ echo $DISPLAY [access1 ~]$ X11Forwarding yes is in place on /etc/ssh/sshd_config and /usr/local/etc/ssh/sshd_config access1# pkg_info | grep openssh openssh-portable-4.6.p1,1 The portable version of OpenBSD's OpenSSH

Re: openssh no X forwarding

2007-07-31 Thread Bill Campbell
On Tue, Jul 31, 2007, Noah wrote: Hi there, $ ssh -X [EMAIL PROTECTED] Try ``ssh -Y [EMAIL PROTECTED]'' ... Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX:(206) 232-9186 Mercer Island,

Can't get openssh-portable to use PAM

2007-05-21 Thread Matt Bostock
Hi all, I'm using security/openssh-portable to provide chroot-ssh, but would now also like to enable PAM for SSH so that I can take advantage of OPIE in certain scenarios. I've compiled openssh-portable with the PAM option (and something PAM-related flashes by during 'configure'), and have

Openssh-portable

2007-03-20 Thread Jeffrey Meyer
Hello all, I recently installed the port openssh-portable. Since then I receive the following when attempting to ssh into the box: Permission denied (publickey). I believe that I am getting this because sshd is attempting to use public key authentication, but I don't want to use

Openssh-portable

2007-03-20 Thread Jeffrey Meyer
Hello all, I recently installed the port openssh-portable. Since then I receive the following when attempting to ssh into the box: Permission denied (publickey). I believe that I am getting this because sshd is attempting to use public key authentication, but I don't want to use

Re: Openssh-portable

2007-03-20 Thread Jeremy Gransden
On 3/20/07, Jeffrey Meyer [EMAIL PROTECTED] wrote: Hello all, I recently installed the port openssh-portable. Since then I receive the following when attempting to ssh into the box: Permission denied (publickey). I believe that I am getting this because sshd is attempting to use public key

OpenSSH Problem with disconnects

2007-03-11 Thread Alexander Schlichting
Hi, I am having a big problem with the OpenSSH Daemon on my server. Whenever I am connected to the server and the connection is idle for a few seconds it gets disconnected. It's almost impossible to work from remote on the server when the connection is always getting dropped. The server

Re: OpenSSH Problem with disconnects

2007-03-11 Thread Bill Campbell
On Sun, Mar 11, 2007, Alexander Schlichting wrote: Hi, I am having a big problem with the OpenSSH Daemon on my server. Whenever I am connected to the server and the connection is idle for a few seconds it gets disconnected. It's almost impossible to work from remote on the server. It's

Re: OpenSSH Problem with disconnects

2007-03-11 Thread Norbert Papke
On Sunday 11 March 2007 09:52, Alexander Schlichting wrote: I am having a big problem with the OpenSSH Daemon on my server. Whenever I am connected to the server and the connection is idle for a few seconds it gets disconnected. It's almost impossible to work from remote on the server when

Re: openssh security issues

2006-12-18 Thread Michael P. Soulier
On 17/12/06 Eric said: why not install the portable version? its much newer than the one you have. I don't know what you mean by the portable version. Can I assume that the answer to my original question then, is no? Mike -- Michael P. Soulier [EMAIL PROTECTED] Any intelligent fool can make

Re: openssh security issues

2006-12-18 Thread Jay Chandler
/security/openssh-portable/ Much newer, more secure, and fun for the whole family. -- Jay Chandler Network Administrator, Chapman University 714.628.7249 / [EMAIL PROTECTED] Today's Excuse: Forced to support NT servers; sysadmins quit. ___ freebsd-questions

Re: openssh security issues

2006-12-18 Thread Eric
question! =) openssh-portable is what i am speaking of. the port is at /usr/ports/security/openssh-portable current version is at 4.5 whereas yours was 1-2 major versions behind that. check it out. once its installed, add this to /etc/rc.conf sshd_enable=NO openssh_enable=YES that way the built

Re: openssh security issues

2006-12-17 Thread Eric
Michael P. Soulier wrote: So, portaudit keeps complaining about openssh, but when I try to upgrade... [EMAIL PROTECTED] ~]$ sudo portupgrade -R openssh [Updating the pkgdb format:bdb1_btree in /var/db/pkg ... - 207 packages found (-1 +1) (...). done] --- Upgrading 'openssh-3.6.1_5' to 'openssh

openssh security issues

2006-12-16 Thread Michael P. Soulier
So, portaudit keeps complaining about openssh, but when I try to upgrade... [EMAIL PROTECTED] ~]$ sudo portupgrade -R openssh [Updating the pkgdb format:bdb1_btree in /var/db/pkg ... - 207 packages found (-1 +1) (...). done] --- Upgrading 'openssh-3.6.1_5' to 'openssh-3.6.1_6' (security/openssh

Re: openssh security issues

2006-12-16 Thread Christopher Cowart
On Sat, Dec 16, 2006 at 10:47:39PM -0500, Michael P. Soulier wrote: So, portaudit keeps complaining about openssh, but when I try to upgrade... [EMAIL PROTECTED] ~]$ sudo portupgrade -R openssh [Updating the pkgdb format:bdb1_btree in /var/db/pkg ... - 207 packages found (-1 +1) (...). done

running ports openssh instead of the base

2006-03-25 Thread Michael P. Soulier
Hi there, If I want to use the openssh from ports to replace the one from the base, after building and installing it, so I need to do anything special in rc.conf to specify that I'd like that one run instead of sshd from the base? Thanks, Mike -- Michael P. Soulier [EMAIL PROTECTED] Any

Re: running ports openssh instead of the base

2006-03-25 Thread Mark Kane
Michael P. Soulier wrote: Hi there, If I want to use the openssh from ports to replace the one from the base, after building and installing it, so I need to do anything special in rc.conf to specify that I'd like that one run instead of sshd from the base? Thanks, Mike Hi. From /usr/ports

Re: running ports openssh instead of the base

2006-03-25 Thread Michael P. Soulier
On 25/03/06 Mark Kane said: Hi. From /usr/ports/security/openssh/pkg-message Doh! Thanks, Mike -- Michael P. Soulier [EMAIL PROTECTED] Any intelligent fool can make things bigger and more complex... It takes a touch of genius - and a lot of courage to move in the opposite direction. --Albert

Re: running ports openssh instead of the base

2006-03-25 Thread Bob Goodman
Sorry for double-posting, somehow I forgot to include the subject line. Hi there, If I want to use the openssh from ports to replace the one from the base, after building and installing it, so I need to do anything special in rc.conf to specify that I'd like that one run instead of sshd

Re: running ports openssh instead of the base

2006-03-25 Thread Michael P. Soulier
On 25/03/06 Mark Kane said: - To enable this port, please add sshd_program=/usr/local/sbin/sshd and make sure sshd_enable is set to YES in your /etc/rc.conf What about the initscript? So I keep running the one from the base, and it picks up this change, or

Re: running ports openssh instead of the base

2006-03-25 Thread Michael P. Soulier
On 26/03/06 Bob Goodman said: You will probably prefer to use security/openssh-portable. That port is more recent if I understand correctly, and is capable of replacing the base ssh automatically, thus making it unnecessary to bug with rc.conf. make config will list the options. Hope

Re: Updating OpenSSH

2006-02-26 Thread Erik Nørgaard
Daniel A. wrote: So, basically, if I want the newest version of OpenSSH running on my system, I have to not use the one shipped with 6.0-RELEASE, and install OpenSSH from ports? Please don't toppost. Installing from ports you'll get version 3.6.1. Before you get paranoid, check the changelog

Re: Updating OpenSSH

2006-02-26 Thread Chris
On 26/02/06, Erik Nørgaard [EMAIL PROTECTED] wrote: Daniel A. wrote: So, basically, if I want the newest version of OpenSSH running on my system, I have to not use the one shipped with 6.0-RELEASE, and install OpenSSH from ports? Please don't toppost. Installing from ports you'll get

Updating OpenSSH

2006-02-25 Thread Daniel A.
Hi, quick question. How do I update the OpenSSH which ships with FreeBSD6.0-RELEASE by default? It's just that I dont feel secure running an old version (4.2p1) of OpenSSH when there is a newer (4.3) version available. ___ freebsd-questions@freebsd.org

Re: Updating OpenSSH

2006-02-25 Thread Giorgos Keramidas
On 2006-02-26 01:25, Daniel A. [EMAIL PROTECTED] wrote: Hi, quick question. How do I update the OpenSSH which ships with FreeBSD6.0-RELEASE by default? It's just that I dont feel secure running an old version (4.2p1) of OpenSSH when there is a newer (4.3) version available. To get security

Re: Updating OpenSSH

2006-02-25 Thread Daniel A.
So, basically, if I want the newest version of OpenSSH running on my system, I have to not use the one shipped with 6.0-RELEASE, and install OpenSSH from ports? On 2/26/06, Giorgos Keramidas [EMAIL PROTECTED] wrote: On 2006-02-26 01:25, Daniel A. [EMAIL PROTECTED] wrote: Hi, quick question

Re: Updating OpenSSH

2006-02-25 Thread Giorgos Keramidas
On 2006-02-26 03:32, Daniel A. [EMAIL PROTECTED] wrote: So, basically, if I want the newest version of OpenSSH running on my system, I have to not use the one shipped with 6.0-RELEASE, and install OpenSSH from ports? Maybe. But do you *want* the latest version? If the base-system version

Re: bundled openssh version

2005-07-01 Thread Dan Mahoney, System Admin
On Sun, 19 Jun 2005, [ISO-8859-1] Björn König wrote: Dan Mahoney, System Admin wrote: Is freeBSD ever going to update the contributed version of openssh to something more recent? Yes. Currently OpenSSH 4.1p1 is part of 6-CURRENT developent branch. An update in 5-STABLE may happen

OpenSSH, Kerberos and RedHat

2005-06-30 Thread Richard Jones
Hi, I'm trying to get OpenSSH with Kerberos5/GSSAPI authentication up and running in an heterogenous environment, but having problems. I'm running a vanilla FreeBSD-5.4p1 box as the KDC. I have another FreeBSD-5.4 box, and a RedHat ES3 box running as a test client/server. kinit works fine

bundled openssh version

2005-06-19 Thread Dan Mahoney, System Admin
Hey all, couple quick questions. ' Is freeBSD ever going to update the contributed version of openssh to something more recent? I'm particularly interested in the DNS SSHFP support, and I'm unsure of the differences between the base version, the one in ports, and the portable version in ports

Re: bundled openssh version

2005-06-19 Thread Björn König
Dan Mahoney, System Admin wrote: Is freeBSD ever going to update the contributed version of openssh to something more recent? Yes. Currently OpenSSH 4.1p1 is part of 6-CURRENT developent branch. An update in 5-STABLE may happen, but not regulary and not definitely. I strongly believe

Re: error installing openssh-portable

2005-04-12 Thread Redmond Militante
case. [Tue, Mar 29, 2005 at 09:14:07AM -0500] This one time, at band camp, Lowell Gilbert said: Redmond Militante [EMAIL PROTECTED] writes: hi all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building

Re: error installing openssh-portable

2005-03-31 Thread Redmond Militante
said: Redmond Militante [EMAIL PROTECTED] writes: hi all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building for openssh-portable-3.9.0.1,1 if test ! -z ; then /usr/bin/perl5 ./fixprogs ssh_prng_cmds ; fi (cd openbsd-compat

Re: error installing openssh-portable

2005-03-30 Thread Lowell Gilbert
: hi all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building for openssh-portable-3.9.0.1,1 if test ! -z ; then /usr/bin/perl5 ./fixprogs ssh_prng_cmds ; fi (cd openbsd-compat make) cc -o ssh ssh.o readconf.o clientloop.o sshtty.o

Re: error installing openssh-portable

2005-03-29 Thread Lowell Gilbert
Redmond Militante [EMAIL PROTECTED] writes: hi all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building for openssh-portable-3.9.0.1,1 if test ! -z ; then /usr/bin/perl5 ./fixprogs ssh_prng_cmds ; fi (cd openbsd-compat make) cc -o ssh ssh.o

Re: error installing openssh-portable

2005-03-29 Thread Redmond Militante
all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building for openssh-portable-3.9.0.1,1 if test ! -z ; then /usr/bin/perl5 ./fixprogs ssh_prng_cmds ; fi (cd openbsd-compat make) cc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o

error installing openssh-portable

2005-03-28 Thread Redmond Militante
hi all i get this installing the openssh-portable port on a 4.8-RELEASE machine === Building for openssh-portable-3.9.0.1,1 if test ! -z ; then /usr/bin/perl5 ./fixprogs ssh_prng_cmds ; fi (cd openbsd-compat make) cc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o

Re: updating system version of OpenSSH

2005-02-27 Thread Lowell Gilbert
wo_shi_big_stomach [EMAIL PROTECTED] writes: Phil Schulz wrote: If you can't afford to upgrade the base OS and you do not want to install OpenSSH from the ports Sorry, I wasn't clear. I have no problem installing or upgrading OpenSSH from ports. Indeed, that's all I know how to do

Re: updating system version of OpenSSH

2005-02-26 Thread wo_shi_big_stomach
Phil Schulz wrote: If you can't afford to upgrade the base OS and you do not want to install OpenSSH from the ports Sorry, I wasn't clear. I have no problem installing or upgrading OpenSSH from ports. Indeed, that's all I know how to do. My question is how to upgrade OpenSSH as included

updating system version of OpenSSH

2005-02-25 Thread David Newman
What is the procedure for patching/updating system version of OpenSSH on an FBSD 5.2.1 box? I used the excellent Rootkit Hunter security assessment tool: http://www.rootkit.nl/projects/rootkit_hunter.html and it found that I'm running OpenSSH 3.6.1p1, which has at least one vulnerability. I

Re: updating system version of OpenSSH

2005-02-25 Thread Phil Schulz
On 02/25/05 20:55, David Newman wrote: What is the procedure for patching/updating system version of OpenSSH on an FBSD 5.2.1 box? If you can't afford to upgrade the base OS and you do not want to install OpenSSH from the ports, then you'll need to specify what vulnerability you are talking

Re: updating system version of OpenSSH

2005-02-25 Thread [EMAIL PROTECTED]
David Newman wrote: What is the procedure for patching/updating system version of OpenSSH on an FBSD 5.2.1 box? I used the excellent Rootkit Hunter security assessment tool: http://www.rootkit.nl/projects/rootkit_hunter.html and it found that I'm running OpenSSH 3.6.1p1, which has at least one

Need help to build openssh with opensc support

2004-11-02 Thread Michael Bohn
Hi all did anybody knows how I can build openssh from the ports collection with opensc support ??? best regards Michael ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail

question about openssh authentication.

2004-10-29 Thread joshua
dear firends: there is a puzzle about openssh authentication, i try to solve it, but i could not, could you help me? there is two account named as 'joshua' and 'moon' on my server. i want to disable password authentication method for 'joshua', let he can login only use public key

Re: question about openssh authentication.

2004-10-29 Thread Dick Davies
* joshua [EMAIL PROTECTED] [1036 13:36]: dear firends: there is a puzzle about openssh authentication, i try to solve it, but i could not, could you help me? there is two account named as 'joshua' and 'moon' on my server. i want to disable password authentication method for 'joshua

Re: upgrading openssl/openssh only using ports

2004-10-01 Thread Angelo Turetta
- Original Message - From: Dan Finn [EMAIL PROTECTED] Sent: Friday, October 01, 2004 2:20 AM I want to upgrade OpenSSH/OpenSSL and I only want to have to use the ports tree to do this. What is the best way to do this? If possible I would like to over write my existing base

openssh upgrade

2004-09-30 Thread Petre Bandac
as the default instalation of openssh becomes deprecated, I don't know which of the ports should I use, openssh or openssh-portable ? what are the differences between them (besides the version number, openssh-portable being the latest version, while openssh is only 3.6) ? thanks in advance

Re: openssh upgrade

2004-09-30 Thread Cristi Tauber
I believe that openssh is openBSD's while portable is meant to be installed on other OSes. Portable is your choice here. Cristi Petre Bandac wrote: as the default instalation of openssh becomes deprecated, I don't know which of the ports should I use

upgrading openssl/openssh only using ports

2004-09-30 Thread Dan Finn
I want to upgrade OpenSSH/OpenSSL and I only want to have to use the ports tree to do this. What is the best way to do this? If possible I would like to over write my existing base installations of those two packages, or delete the base install ones if that's possible (preferably not by hand

Re: upgrading openssl/openssh only using ports

2004-09-30 Thread Subhro
On Thu, 30 Sep 2004 17:20:01 -0700, Dan Finn [EMAIL PROTECTED] wrote: I want to upgrade OpenSSH/OpenSSL and I only want to have to use the ports tree to do this. What is the best way to do this? Just cd to the ports directory and make all install clean f possible I would like to over write

Re: `pkg_info | grep -i openssh` ; echo 2.9 vs 3.0.2? [cjc]

2004-09-24 Thread Crist J. Clark
On Wed, Apr 10, 2002 at 02:35:16AM -0400, Peter Leftwich wrote: On Mon, 8 Apr 2002, Crist J. Clark wrote: [snip] PL My question was regarding ssh, not sshd. Then I shall reprhase: Are you actually running the ssh(1) in /usr/local/bin/ssh or the old one in /usr/bin/ssh? Crist J. Clark

Re: `pkg_info | grep -i openssh` ; echo 2.9 vs 3.0.2? [cjc]

2004-09-24 Thread Peter Leftwich
On Mon, 8 Apr 2002, Crist J. Clark wrote: [snip] PL My question was regarding ssh, not sshd. Then I shall reprhase: Are you actually running the ssh(1) in /usr/local/bin/ssh or the old one in /usr/bin/ssh? Crist J. Clark | [EMAIL PROTECTED],[EMAIL PROTECTED]

Re: `pkg_info | grep -i openssh` ; echo 2.9 vs 3.0.2?

2004-09-24 Thread Crist J. Clark
On Sun, Apr 07, 2002 at 12:00:55AM -0800, Peter Leftwich wrote: prompt$ pkg_info | grep -i openssh openssh-3.0.2 OpenBSD's secure shell client and server (remote login prog I just upgraded (or tried to upgrade) openssh on my FreeBSD 4.5-RELEASE box using /stand/sysinstall but I get

Re: `pkg_info | grep -i openssh` ; echo 2.9 vs 3.0.2?

2004-09-24 Thread Scott Robbins
On Sun, 7 Apr 2002 00:00:55 -0800 (PST) Peter Leftwich [EMAIL PROTECTED] wrote: prompt$ pkg_info | grep -i openssh openssh-3.0.2 OpenBSD's secure shell client and server (remote login prog I just upgraded (or tried to upgrade) openssh on my FreeBSD 4.5-RELEASE box using /stand

Re: openssl/openssh from ports or base?

2004-07-30 Thread Bob Tito
Jason P Holland wrote: Hello, What is the preferred method that people are using for keeping openssl and openssh up to date? Are most people using the ports version? Or the base version? Seems like if there is a vunlerability released, its much easier to cvsup the ports tree and reinstall

openssl/openssh from ports or base?

2004-07-29 Thread Jason P Holland
Hello, What is the preferred method that people are using for keeping openssl and openssh up to date? Are most people using the ports version? Or the base version? Seems like if there is a vunlerability released, its much easier to cvsup the ports tree and reinstall. But if you use the base

Re: SSH Client - OpenSSH dependency problem

2004-07-23 Thread Bryce
Thanks for the tip. Would you believe though I now also have a problem installing openSSH from ports. I have just CVSuped my ports tree but executing: make install clean from the openssh directory exits with the error: Dependency warning: used OpenSSL version contains known vulnerabilities Please

Re: SSH Client - OpenSSH dependency problem

2004-07-23 Thread Danny De Bie
Bryce wrote: Dependency warning: used OpenSSL version contains known vulnerabilities Please update or define either WITH_OPENSSL_BASE or WITH_OPENSSL_PORT Can anyone throw some light on how to fix this? Hi Bryce, I'm not sure, but my guess is you need to install the openssl port first!

Re: SSH Client - OpenSSH dependency problem

2004-07-23 Thread Ruben de Groot
On Fri, Jul 23, 2004 at 09:20:13AM +0200, Danny De Bie typed: Bryce wrote: Dependency warning: used OpenSSL version contains known vulnerabilities Please update or define either WITH_OPENSSL_BASE or WITH_OPENSSL_PORT Can anyone throw some light on how to fix this? Hi Bryce, I'm

  1   2   >