Re: UseLogin and X11Forwarding

From: Casper Dik (Casper.Dik@Sun.COM)
Date: 05/24/02 

To: "Ivanov, Vladimir" <VIvanov@tee.toshiba.de>
Date: Fri, 24 May 2002 17:32:02 +0200
From: Casper Dik <Casper.Dik@Sun.COM>

>...from man sshd: "Note also, that if this [UseLogin] is enabled, X11Forwarding will be disabled b
ecause login(1) does not know how to handle xauth(1) cookies."
>
>As far, as I know OpenSSH will be shipped with Solaris 9. Will be this issue addressed somehow? It
 is quite stupid to use ssh and, when you are (for example) trying to install Oracle on Netra serve
r to allow unencrypted X traffic to follow a network.
>

The version bundled with Solaris 9 does not need UseLogin; it has
BSM, pam, etc, all rolled into the login procedure.

X forwarding works as it should.

Casper

Relevant Pages

  • Re: OpenSSH Password Aging/Expiration on UW2.1.3
    ... Try using gcc compiler. ... >difficulties with UnixWare and not Solaris. ... >> Look at the thread 'OpenSSH and forced password change' ... >>> When user bob attempts to login, ...
    (comp.security.ssh)
  • Re: ssh compatability issues
    ... >> without keeping two versions of ssh around on my home computer. ... running the OpenSSH server that comes with Solaris ... By 'some old security problems with that' I was not sure if you meant ...
    (comp.security.ssh)
  • Sunfreeware OpenSSH 3.8p1 hostbased auth problem Solaris 9
    ... I've also explicitly disabled OpenSSH protocol 1. ... hostbased authentication only works when the client has ssh suid root. ... One of the OpenSSH devs suggested that for Solaris it could be hardcoded ...
    (SunManagers)
  • Proving OpenSSH 3.4p1 is using /dev/urandom (Solaris 9 ossh Vs OpenBSD ossh)
    ... I've had my battles with using a randomness generator under Solaris. ... Over the years while compiling up OpenSSH I've used AndiRAND, egd, ... OpenSSH ... However lsof does not show it being used as above. ...
    (Focus-SUN)
  • Re: Installing openssh on solaris 8 server
    ... I guess you have more fun with the packages onhttp://www.blastwave.org/ ... Older Solaris 8 versions do not have them out of the box. ... openssh package will tell you _beforehand_ if you need additional patch ... And with the blastwave infrastructure in place ...
    (comp.unix.solaris)