Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
From: posting-list AT MailAndNews DOT com (Jari Aalto+mail.emacs)
To: Corinna Vinschen <cygwin AT cygwin DOT com>
Subject: openSSH runs command= in authorized_keys? (Was W98 -- sshd )
Keywords: debug1,tpu,newton,jaalto,cygwin,sshd,ssh,session
X-Sender-Info: Emacs tiny tools: http://poboxes.com/jari.aalto/emacs-elisp.html
  http://home.eu.org/~jari/homepage.html. ICQ 'jari-aalto' 82313129
  PGP 2.6.x keyid 47141D35 http://www.pgpi.net/
References: <wkelzjopa0 DOT fsf AT blue DOT sea DOT net> <00120723515909 DOT 04143 AT cobold>
In-Reply-To: <00120723515909.04143@cobold>
Message-ID: <wk7l59nes7.fsf_-_@blue.sea.net>
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.6 (i386-*-windows98.1998)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Date: 10 Dec 2000 06:16:22 +0200
Lines: 63

* Thu 2000-12-07 Corinna Vinschen <cygwin AT cygwin DOT com> list.cygwin
* Message-Id: <00120723515909 DOT 04143 AT cobold>
| On Thursday 07 December 2000 23:11, Jari Aalto+mail.emacs wrote:
| 
| > Authentication tried for jaalto with correct key but not from a
| > permitted host ( host3.167.166.26, ip3.167.166.26).
| > ---------------------------------------------------------------------
| >-- # /etc/sshd_config -- Cygwin -- Open SSH 2.1.1
| > # $Id$
| > #
| > # This is ssh server systemwide configuration file.
| >
| >
| > Port		    22
| > Protocol	    1,2
| >
| > # ListenAddress 0.0.0.0
| > # ListenAddress ::
| > # HostKey /etc/ssh_host_key
| >
| > ServerKeyBits	    768
| > LoginGraceTime	    600
| >
| > KeyRegenerationInterval 3600
| >
| > #   Don't read ~/.rhosts and ~/.shosts files
| >
| > IgnoreRhosts	    no
| 
| Try setting
| 
| 	IgnoreRhosts yes
| 
| in your sshd_config file.

Exllent, it almost permitted me to login, but now it tries to
run this command

   Accepted rsa for jaalto from 193.167.70.2 port 36312
   debug1: session_new: init
   debug1: session_new: session 0
   debug1: Enabling compression at level 9.
   debug1: Allocating a pty not permitted for this authentication.
>>   debug1: Forced command '/users/jaalto/test.sh'

Why does it want to run it, when I'm not connecting from X
not Y? The line in my authorized_keys reads:

command="/users/jaalto/test.sh",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,from="terra.cs.tpu.fi" 1024 37 ....KEY... acos-pwdless

The client machine I used for connecting to Win98 sshd was

    newton tmp % nslookup newton.tpu.fi
    Server:  newton.tpu.fi
    Address:  193.167.70.2

    Name:    newton.tpu.fi
    Address:  193.167.70.2


It's t supposed to trigger only for specific domain addresses?

Jari


--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com