Re: SSH authentication bypass?

2014-06-27 Thread Tom Buskey
On Thu, Jun 26, 2014 at 5:21 PM, Joshua Judson Rosen roz...@geekspace.com wrote: Tom Buskey t...@buskey.name writes: On Wed, Jun 25, 2014 at 12:08 PM, Joshua Judson Rosen roz...@geekspace.com wrote: *AHA*--found the answer:

Re: SSH authentication bypass?

2014-06-27 Thread Kevin D. Clark
Tom Buskey writes: There was a neat article in Linux Journal (?) that compared compression/decompression time, bandwidth, data compressibility and cpu speed. Thank you very much for the very interesting article. Back when I was playing around with the HPN SSH, I was sort-of guessing that

Re: SSH authentication bypass?

2014-06-27 Thread Tom Buskey
There was an interesting thing around 1999 called DXPC. Where SSH -X -c would compress the bits between the X11 server and client, DXPC would convert the protocol at either end before it went through SSH. It was a *much* greater speed up then -c was. I think it got consumed into other projects

Re: SSH authentication bypass?

2014-06-26 Thread Kevin D. Clark
Mark Komarinski writes: HPN SSH (patches to boost ssh performance) allows for no encryption of the data stream but IIRC the authentication is encrypted.  That doesn't bypass authentication so this may not be related The following statement is based on my experience with these patches: I

Re: SSH authentication bypass?

2014-06-26 Thread Tom Buskey
On Thu, Jun 26, 2014 at 3:00 PM, Kevin D. Clark kevin_d_cl...@comcast.net wrote: Mark Komarinski writes: HPN SSH (patches to boost ssh performance) allows for no encryption of the data stream but IIRC the authentication is encrypted. That doesn't bypass authentication so this may not be

Re: SSH authentication bypass?

2014-06-26 Thread Tom Buskey
This is the article: http://www.linuxjournal.com/node/8051/print On Thu, Jun 26, 2014 at 4:07 PM, Tom Buskey t...@buskey.name wrote: On Thu, Jun 26, 2014 at 3:00 PM, Kevin D. Clark kevin_d_cl...@comcast.net wrote: Mark Komarinski writes: HPN SSH (patches to boost ssh performance)

SSH overhead (was: SSH authentication bypass?)

2014-06-26 Thread Joshua Judson Rosen
kevin_d_cl...@comcast.net (Kevin D. Clark) writes: Mark Komarinski writes: HPN SSH (patches to boost ssh performance) allows for no encryption of the data stream but IIRC the authentication is encrypted.  That doesn't bypass authentication so this may not be related The following

Re: SSH authentication bypass?

2014-06-26 Thread Joshua Judson Rosen
Tom Buskey t...@buskey.name writes: This is the article: http://www.linuxjournal.com/node/8051/print Nice one--thanks! -- 'tis an ill wind that blows no minds. On Thu, Jun 26, 2014 at 4:07 PM, Tom Buskey t...@buskey.name wrote: On Thu, Jun 26, 2014 at 3:00 PM, Kevin D. Clark

Re: SSH authentication bypass?

2014-06-26 Thread Joshua Judson Rosen
Tom Buskey t...@buskey.name writes: On Wed, Jun 25, 2014 at 12:08 PM, Joshua Judson Rosen roz...@geekspace.com wrote: *AHA*--found the answer: http://article.gmane.org/gmane.network.openssh.general/7446 OpenSSH implements none auth by trying to authenticate with an empty

Re: SSH authentication bypass?

2014-06-26 Thread Chris Linstid
On Thu, Jun 26, 2014 at 4:09 PM, Tom Buskey t...@buskey.name wrote: This is the article: http://www.linuxjournal.com/node/8051/print I used the same lightly loaded AMD Athlon XP 1700+ CPU with 1GB of RAM and version 2.4.27-1-k7 of the Linux kernel for all tests. I'd love to see an update

Re: SSH authentication bypass?

2014-06-25 Thread Joshua Judson Rosen
Having sshd manage auth using PKI is not what I'm looking for; supposedly there is a none auth-type that SSH can use, which means that SSH is just giving you an encrypted stream and the shell running at the end of the link is responsible for actually prompting for login credentials and

Re: SSH authentication bypass?

2014-06-25 Thread Mark Komarinski
HPN SSH (patches to boost ssh performance) allows for no encryption of the data stream but IIRC the authentication is encrypted.  That doesn't bypass authentication so this may not be related On Jun 25, 2014 11:23 AM, Joshua Judson Rosen roz...@geekspace.com wrote: Having sshd manage auth

Re: SSH authentication bypass?

2014-06-25 Thread Joshua Judson Rosen
*AHA*--found the answer: http://article.gmane.org/gmane.network.openssh.general/7446 OpenSSH implements none auth by trying to authenticate with an empty password. I'm still not sure where in the code this is actually happening, but it does seem to work: if I just null-out my user's

Re: SSH authentication bypass?

2014-06-25 Thread Tom Buskey
On Wed, Jun 25, 2014 at 12:08 PM, Joshua Judson Rosen roz...@geekspace.com wrote: *AHA*--found the answer: http://article.gmane.org/gmane.network.openssh.general/7446 OpenSSH implements none auth by trying to authenticate with an empty password. I'm still not sure where in the code

Re: SSH authentication bypass?

2014-06-25 Thread Tom Buskey
Older versions of SSH (v1?) from SSH Inc let you specifiy noop or xor as the encryption method in a similar way. It could speed up the transfer quite a bit. On Wed, Jun 25, 2014 at 11:31 AM, Mark Komarinski mkomarin...@wayga.org wrote: HPN SSH (patches to boost ssh performance) allows for

Re: SSH authentication bypass?

2014-06-25 Thread John Feole
Yea, thats what the url i sent explained howto do using putty..Its the only way i've done it, with passwordless keys in the past with Linux, Solaris, etc, as they use OpenSSH. JFeole On Wed, Jun 25, 2014 at 2:46 PM, Tom Buskey t...@buskey.name wrote: On Wed, Jun 25, 2014 at 12:08 PM, Joshua

SSH authentication bypass?

2014-06-24 Thread Joshua Judson Rosen
Poking around in PuTTY..., there's an SSH auth setting labeled: Bypass authentication entirely (SSH-2 only) I have an application where that'd be great; how the heck do I configure sshd to let that work? -- 'tis an ill wind that blows no minds.

Re: SSH authentication bypass?

2014-06-24 Thread John Feole
I'm a little rusty, but i usedmto admin Solaris machines using keys with winders client using something like this doc: http://www.tonido.com/blog/index.php/2009/02/20/ssh-without-password-using-putty/#.U6oG7JHD8b0 Regards, jfeole On Jun 24, 2014 5:21 PM, Joshua Judson Rosen roz...@geekspace.com