LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] openssh vulnerability

[ILUG] openssh vulnerability

Rick Moen rick at linuxmafia.com
Wed Jun 26 01:39:22 IST 2002


Quoting John Madden (maddenj at skynet.ie):

> add deb http://security.debian.org/ testing/updates main contrib non-free
> to /etc/apt/sources.list. apt-get install ssh then added:
> UsePrivilegeSeparation	yes
> Compression 		no
> 
> to /etc/ssh/sshd_config
> 
> Only problem I've come across so far is that most of the users have ssh1
> keys generated for accessing mail on another server in the network and
> 3.3 doesn't seem to support it (at least that's what I think the problem
> is, not having looked too deeply into it yet). Other than that, no
> upsets yet.

Well, I haven't yet tested using either RSA or DSA keypairs, but
version-1.5 protocol support definitely is OK (per my tests using 
"ssh -v -1 hostname".  I'll test using keypairs next, I guess.

What a pain in the neck this is turning out to be, eh?

-- 
Cheers,   The difference between common sense and paranoia is that common sense
Rick Moen     is thinking everyone is out to get you.  That's normal; they are.
rick at linuxmafia.com      Paranoia is thinking they're conspiring.  -- J. Kegler




More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell