Re: Rhosts authentication with openssh 3.7

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 11/25/03 

Date: Tue, 25 Nov 2003 00:38:35 GMT

In article <773f08cd.0311240733.20dc976d@posting.google.com>,
ludovic LECLERC <ludovic.leclerc@col.bsf.alcatel.fr> wrote:
>I know that rhosts based authentication is HEAVILY unsecured but in my
>special case, it would help. I don't like the idea of having a feature
>in a software that disappears one day in a release just because
>someone said "what that f... option ?!? still exists ?... ok let's
>blast it !".

>Someone know if there is a patch to restore this option ? (no it's not
>a joke...).

http://www.zip.com.au/~dtucker/openssh/openssh-rhosts.patch

Someone else asked for this earlier so I pulled the patchset that removed
it from CVS and put it up. I'll give you the same advice I gave them:
feed it to "patch -R -p0" then you're on your own. I don't know if it
will apply cleanly to 3.7.1p2 (there will certainly be rejects on the
$OpenBSD CVS tags but you can ignore those).

I don't know if they ended up using it; RhostsRSA was suitable for their
environment and I suggested they use that instead. 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages