X-Spam-Check-By:	sourceware.org
Message-ID:	<31b7d2790610101517m128c257bi31c0a5767070a664@mail.gmail.com>
Date:	Tue, 10 Oct 2006 23:17:29 +0100
From:	"DePriest, Jason R." <jrdepriest AT gmail DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: cygwin 1.5.21-2: ssh-add unable to connect to ssh-agent with McAfee installed
In-Reply-To:	<452C15C2.4060800@cdvinc.com>
MIME-Version:	1.0
References:	<452C15C2 DOT 4060800 AT cdvinc DOT com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 10/10/06, Tim Beuman <> wrote:
> Hi,
>
> I still have problems with ssh-agent/ssh-add when I install McAfee.
> Browsing over the internet didn't yield a working solution. Before I
> could stop McAfee and it would work but with the latest version of
> McAfee (version 10?) disabling McAfee doesn't make any difference
> anymore. Only an uninstall of McAfee makes things work again but this is
> not an option.
>
> A search of the mailing lists yielded other reports of the same problem
> but no real solutions.
>
> After some digging in the source I found that ssh-agent keeps waiting in
> the select for ssh-add to connect. For whatever reason ssh-add seems to
> be unable to connect to the AF_LOCAL socket created by ssh-agent.
>
> Attached the strace files from ssh-agent and ssh-add as well as the
> cygcheck output.
>

DELETED Ridiculous amount of stuff that probably should have been in
an attachment.

I am not familiar with the home version of McAfee VirusScan, but I do
run VirusScan Enterprise 8.0i, patch 11 at work.

Buffer Overflow Protection is disabled by default at the ePolicy
Orchestrator (management server) level because it broke a large number
of applications.

I would see if you can just disable that feature.

Also, if McAfee is the definitive problem, turn on all the logging for
McAfee and see if they tell you what they are blocking.

The home version of the product may have a lot more of their firewall
built in to it for all I know.

All this version does is simple port blocking and a little bit of
worm-like behavior blocking (which you may also want to check out if
you can).

My two guesses would be Buffer Overflow Protection and Access
Protection (that is what they are called in my version).

-Jason

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -