delorie.com/archives/browse.cgi | search |
X-Recipient: | archive-cygwin AT delorie DOT com |
DomainKey-Signature: | a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id |
:list-unsubscribe:list-subscribe:list-archive:list-post | |
:list-help:sender:date:from:reply-to:message-id:to:subject | |
:in-reply-to:references:mime-version:content-type | |
:content-transfer-encoding; q=dns; s=default; b=tHpMcxiSBXC39xG4 | |
5vDoj/3no8uAq+GFbJIyCujZ92jJwrmVha5+UwssBgrQNvIJbnrOK+IEKwXgYTZZ | |
cKzKbgHGpXg4G+4RTehadzVJ+ihIk7J5zsK3lTSKbK0ZicA7ca/WZn9bYwQlmD6A | |
kjDt3PtlfsUHSzX2FpTZW50l+fk= | |
DKIM-Signature: | v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id |
:list-unsubscribe:list-subscribe:list-archive:list-post | |
:list-help:sender:date:from:reply-to:message-id:to:subject | |
:in-reply-to:references:mime-version:content-type | |
:content-transfer-encoding; s=default; bh=jEw1QhKMzxvtBupDnB4jEt | |
ZE8yI=; b=Ut8aE58swNNDnukogUbgT5PyAf0Dt4GinvTY4UFvS3CyZYflGFjknl | |
dYzkTy2DjlnmRC2gBwsQynsbEgOnQfW9h2TAP0adlEMlP819eKvJkIurf0dipmZV | |
W2ws1A2If98/ZqFkUH1oACLHknCbrqBJsK1sklYHY1QLysmG0Ivjg= | |
Mailing-List: | contact cygwin-help AT cygwin DOT com; run by ezmlm |
List-Id: | <cygwin.cygwin.com> |
List-Subscribe: | <mailto:cygwin-subscribe AT cygwin DOT com> |
List-Archive: | <http://sourceware.org/ml/cygwin/> |
List-Post: | <mailto:cygwin AT cygwin DOT com> |
List-Help: | <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs> |
Sender: | cygwin-owner AT cygwin DOT com |
Mail-Followup-To: | cygwin AT cygwin DOT com |
Delivered-To: | mailing list cygwin AT cygwin DOT com |
Authentication-Results: | sourceware.org; auth=none |
X-Virus-Found: | No |
X-Spam-SWARE-Status: | Yes, score=6.3 required=5.0 tests=AWL,BAYES_80,FREEMAIL_FROM,KAM_THEBAT,RCVD_IN_JMF_BL,SPF_SOFTFAIL autolearn=no version=3.3.2 |
X-HELO: | smtp.ht-systems.ru |
Date: | Mon, 7 Sep 2015 00:40:05 +0300 |
From: | Andrey Repin <anrdaemon AT yandex DOT ru> |
Reply-To: | cygwin AT cygwin DOT com |
Message-ID: | <741476330.20150907004005@yandex.ru> |
To: | Zdzislaw Meglicki <zdzisiekm AT sbcglobal DOT net>, cygwin AT cygwin DOT com |
Subject: | Re: Sshd behaving strangely... |
In-Reply-To: | <1536135967.1623711.1441554363665.JavaMail.yahoo@mail.yahoo.com> |
References: | <1536135967 DOT 1623711 DOT 1441554363665 DOT JavaMail DOT yahoo AT mail DOT yahoo DOT com> |
MIME-Version: | 1.0 |
X-IsSubscribed: | yes |
Greetings, Zdzislaw Meglicki! Please teach your mail agent to not break threading. Thank you in advance. >> OpenSSH 7.0 (and thus the current 7.1) deprecated a couple >> of old and insecure ciphers. Probably that's the reason. > Well, what I mean is that it is strange that sshd-7.1p1-1 accepts > a connection from ssh-3.9p1, upon announcing that the "key type ssh-dss > [is] not in PubkeyAcceptedKeyTypes," and lets the user in having accepted > the password, Likely explanation is that you've tried to connect using private DSA key, which server rejected and subsequently asked for a password. > yet rejects connection from ssh-6.8p1-1 not even allowing > for the presentation of a password, and claims that "seteuid operation > [is] not permitted." This is a different issue, judging from the error message. Without more data from both sides it is impossible to tell for certain, whats going on. A verbose log of the same connection from both server and client may help. > Why was the operation permitted when the key was not in > PubkeyAcceptedKeyTypes? > This seems to me to be a security bug. More like you are not telling us a whole story. > And I still wonder how to configure sshd to allow normal connections > with accepted key types, any documentation out there that would help? Sorry, what? It do work like that out of the box. -- With best regards, Andrey Repin Monday, September 7, 2015 00:33:31 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
webmaster | delorie software privacy |
Copyright © 2019 by DJ Delorie | Updated Jul 2019 |