delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2000/11/21/12:09:13

Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Message-ID: <3A1AA990.D6E736BF@redhat.com>
Date: Tue, 21 Nov 2000 17:57:52 +0100
From: Corinna Vinschen <vinschen AT redhat DOT com>
Reply-To: cygwin <cygwin AT cygwin DOT com>
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.14-SMP i686)
X-Accept-Language: de, en
MIME-Version: 1.0
To: cygwin <cygwin AT cygwin DOT com>
Subject: Re: SSHD setup
References: <033701c053a5$34b302b0$f7c723cb AT lifelesswks>
<033701c053a5$34b302b0$f7c723cb AT lifelesswks> <5 DOT 0 DOT 0 DOT 25 DOT 2 DOT 20001121093042 DOT 02df5500 AT mail DOT prefres DOT com>

Matt Minnis wrote:
> Ok,
> 
> I have beat my head against this too much now.
> What are the permissions for '/usr/local/etc/ssh_host_key'?

Take a look into your /etc/sshd_config file. It seems to be
an older version which contains "HostKey /usr/local/etc/ssh_host_key"
by mistake. Change the value to the "HostKey /etc/ssh_host_key"
or comment it by prepending a `#' character.

> What about '/etc/ssh_host_dsa_key'?
> If they are too open it says that this is bad, but when they are more
> secure, then it can't load it because it is not allowed.
> what chmod values do I need?
> 
> /source/NT_Admin >sshd -d
> debug1: sshd version OpenSSH_2.3.0p1
> debug1: Seeding random number generator
> error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> error: @         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
> error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> error: Bad ownership or mode(0600) for '/usr/local/etc/ssh_host_key'.

The ownership has to be either the user which starts sshd or the
user with Cygwin uid 0. If you have read the ntsec documentation
you know that the Cygwin uid need not to be the same as the WinNT
RID.

The above mode is ok: 0600 = -rw------- which is recommended. So I
assume the ownership isn't correct.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                        mailto:cygwin AT sources DOT redhat DOT com
Red Hat, Inc.
mailto:vinschen AT redhat DOT com

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019