Re: ssh compatability issues

From: Nico Kadel-Garcia (nkadel@bellatlantic.net)
Date: 01/28/03 

From: "Nico Kadel-Garcia" <nkadel@bellatlantic.net>
Date: Tue, 28 Jan 2003 05:14:58 GMT

"Dr. David Kirkby" <drkirkby@ntlworld.com> wrote in message
news:3E360B35.375046E@ntlworld.com...
> Hi,
> I seem to be experiencing some compatability issues between the
> OpenSSH supplied as part of Solaris 9 and the ssh supplied by
> www.ssh.com. I wonder if anyone can suggest how to get around them,
> without keeping two versions of ssh around on my home computer.
>
> I have two systems I wish to connect.
>
> 1) A home computer, running the OpenSSH server that comes with Solaris
> 9.
>
> This computer also has an older SSH Secure Shell 2.2.0 from
> www.ssh.com (non commercial version).

*UPDATE THIS RIGHT NOW*. There are some old security problems with that.

> 2) A computer at the university that runs the SSH Secure Shell 2.2.0
> from www.ssh.com.

*UPDATE THIS RIGHT NOW*. Again, old security problems.

> I have several problems
> a) I can only connect to the University's computer without passwords
> if I use ssh from www.ssh.com - the same as the university uses.
>
> b) I can only ssh to the localhost on my own home computer, which uses
> the Solaris 9/OpenSSH server if I use the ssh that is part of that.
> Trying to use the old ssh clients from www.ssh.com fails.

Again, you need some updates. There have been subtle changes in both
releases. And read the manual pages on all of these systems on sshd and its
options which may be set to restrict things in ways that you are seeing
here.

> c) Neither the ssh program that comes as part of Solaris, or that from
> www.ssh.com, will allow root to ssh to the localhost.

No surprise, that's in sshd_config and is probably disabled.

> Any comments?? Suggestions? One option I have is to use the ssh server
> at home from www.ssh.com, but I'd rather use open tools if possible.
> The version from www.ssh.com I have is rather old and perhaps udating
> it will bring me more problems!

Update. It's pretty easy to do, and will make your life considerably.
Updating to OpenSSH will also, I think, be more secure and mean you only
have to have one daemon installed, not one for SSH1 and another for SSH2
that summons the SSH1 daemon as needed....

Relevant Pages

  • Re: ssh compatability issues
    ... >> without keeping two versions of ssh around on my home computer. ... running the OpenSSH server that comes with Solaris ... By 'some old security problems with that' I was not sure if you meant ...
    (comp.security.ssh)
  • Sunfreeware OpenSSH 3.8p1 hostbased auth problem Solaris 9
    ... I've also explicitly disabled OpenSSH protocol 1. ... hostbased authentication only works when the client has ssh suid root. ... One of the OpenSSH devs suggested that for Solaris it could be hardcoded ...
    (SunManagers)
  • Re: trojaned SSHD ?
    ... I'd recommend moving to OpenSSH, which supports both ssh1 and ssh2 ... platforms, including Solaris. ... Information relevant to the installation of SSH on NCMIR systems. ... * Install Zlib 1.1.2 libraries, compiling from source, on Solaris and IRIX ...
    (Focus-SUN)
  • server securing issues
    ... have done some securing on my solaris server and ... Information about the remote host: ... Port ssh ... An SSH server is running on this port. ...
    (SunManagers)
  • Re: Solaris 9 & sun ssh version or openssh ?
    ... The main reason for me to use OpenSSH instead of Sun's SSH under Solaris 9 ... > patches for sun_ssh should something weird be discovered weighs more ...
    (comp.unix.solaris)