Re: fatal: mm_receive_fd
From: Ville Herva (vherva@niksula.hut.fi)
Date: 11/30/02
- Previous message: Bobby Patel: "Restrict a SSH account to a single IP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 30 Nov 2002 23:14:35 +0200 From: Ville Herva <vherva@niksula.hut.fi> To: David Sims <dpsims@virtualdave.com>
On Wed, Nov 27, 2002 at 12:30:28PM -0600, you [David Sims] wrote:
> Hi,
>
> Thanks. I have built this using the configure flag --with-md5-passwords
> with no change in behavior... i.e., it works for root but not for non-root
> users.... Any other clues??
If you are running openssh-3.4p or openssh-3.5p on linux kernel 2.0.x,
privilege separation doesn't work. If you try to enable it, you get the
quoted error message. (AFAICR linux-2.0.x leaves one field uninitialized in
unix domain socket code, and openssh tries to check it, hence the error.)
There was a patch for this on this list when 3.4 was released - I'm not
sure if it was good, and why it wasn't integrated.
Your can turn of privilege separation from sshd_config, it'll work then.
(If you are not running linux 2.0.x, then I don't know what the problem is.)
> > On Tue Nov 26 08:32:19 PM, David Sims wrote:
> >
> > > I have downloaded the source tarball openssh-3.5p1.tar.gz
> > > and built it on a Redhat 5.3 machine... It builds without complaining and
> > > installs ok too.... Once installed, you can connect and successfully log
> > > in (using a password) as root, but trying to connect as any other user
> > > results in the error message below in the system log file:
> > >
> > > Nov 26 20:01:57 gateway sshd[3122]: Accepted password for dpsims from
> > > xxx.xx.xxx.xx port 1058 ssh2
> > > Nov 26 20:01:57 gateway sshd[3124]: fatal: mm_receive_fd: expected type 1
> > > got 1074198465
> > >
> > > Any clues would be appreciated.
-- v --
- Next message: Noah Salzman: "Re: Such a question"
- Previous message: Bobby Patel: "Restrict a SSH account to a single IP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]