March 2002 - openSUSE Security - openSUSE Mailing Lists

AW: AW: AW: [suse-security] Openssh Upgrade Suse 7.3
by suse-security 28 Mar '02

28 Mar '02

> > > > What about a "fallback"-automagic option ? > > What does this mean ? > I've tried the same with the latest SuSE Source (2.9.9p2 Rel > 98) and OpenSSH 3.1p1 - I always get a "Protocol major > versions differ: 1 vs. 2" Message on the client side. > This seams correct to me. If you try out scanssh you can see the version of the sshd server and the current protocol. If you have changed to ssh2 you should see: Somthing like: SSH-".0-OPENSSH_3.0.3p1 ....

2 1

AW: AW: [suse-security] Openssh Upgrade Suse 7.3
by suse-security 28 Mar '02

28 Mar '02

> |Problem solved ... I had to install openssl-dev .. > | > |Thanx > |Nik > But now as a have upgraded the Openssh package, i am facing an other curious problem. I can´t disable Protocol 1 In my sshd config i added the line Protocol 2 Nevertheless the server is still accepting Protocol 1. Do i have to deinstall the suse package ? (I changed the links already, restarted the service etc. and the server is clearly identiyfieing with the new version) Nik

3 2

AW: [suse-security] Openssh Upgrade Suse 7.3
by suse-security 27 Mar '02

27 Mar '02

> > simple solution - install OpenSSL - the openssl-0.9.6b that > > comes with SuSE 7.3 should work. > > No that ist not the Problem, OpenSSL is installed, Problem solved ... I had to install openssl-dev .. Thanx Nik

1 0

AW: [suse-security] Openssh Upgrade Suse 7.3
by suse-security 27 Mar '02

27 Mar '02

> simple solution - install OpenSSL - the openssl-0.9.6b that > comes with SuSE 7.3 should work. No that ist not the Problem, OpenSSL is installed, > BTW: OpenSSH_2.9p2 is also affected by the "March 7, 2002: Off-by-one error in the channel > code" - the most current version is 3.1p1 The same with the current version Do i have the use a certain configure option for installing ? __________________________________________________________ Nik Engel NETWAYS GmbH Senior Systems Engineer Deutschherrnstr. 47a Fon.0911/92885-13 D-90429 Nürnberg Fax.0911/92885-33 nengel(a)netways.de www.netways.de

1 0

Openssh Upgrade Suse 7.3
by suse-security 27 Mar '02

27 Mar '02

Hi there ! I want to upgrade my Suse 7.3 box from OpenSSH_2.9p1 to OpenSSH_2.9p2 But after installing the Souse rpm with the appropriate Version. And ./configure i get the error : Could not find working OpenSSL libary .. How can i apply the patch. __________________________________________________________ Nik Engel NETWAYS GmbH Senior Systems Engineer Deutschherrnstr. 47a Fon.0911/92885-13 D-90429 Nürnberg Fax.0911/92885-33 nengel(a)netways.de www.netways.de

3 2

Samba & Ident problems
by Chris Weber 27 Mar '02

27 Mar '02

hi list! i have two security problems: 1. i want to close the admin$ share of the samba server. 2. my linux machine is a router. some windows machines from the internal net use it as gateway. my prob is that the port 113 on the linux machine isnot routed in the internal net. i used the security scanner from grc.com andit showed that this port is closed. ident is not started on my linux machine andthe firewall doesn't block that port, so i don't know, why it doesn't route it into theinternal net. i read that instead of stealthing the port it is only closed, becausesome connections need to get an answer of the ident service even if it says, that it isclosed. i need this port routed to internal for using irc. thanx =) -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net

2 1

Ximian-Gnome -> kein SuSE Menu mehr
by Marcel Schmedes 27 Mar '02

27 Mar '02

Hallo Liste, habe mir den neuen Ximian-Gnome gezogen, installation hat mehr oder weniger gut geklappt. Allerdings fehlen mir jetzt die SuSE-Menues etc. wie kann ich diese in das Ximian-Standart-Schema einfuegen? P.S.: Habe vorher ein Backup von meinem Home gemacht, finde ich dort vielleicht die Files???

1 1

[suse-security] unsuscribe suse-security
by Rossell, Roger 27 Mar '02

27 Mar '02

unsuscribe roger(a)grupids.com

1 0

Re: [suse-security] ssh error
by Robert Szentmihalyi 27 Mar '02

27 Mar '02

On Wednesday, 27. March 2002 08:48, Andreas S. Kerber wrote: > On Tue, Mar 26, 2002 at 11:49:47PM +0100, Robert Szentmihalyi wrote: > > > It wants to have the protocol version 2 dsa host key: > > > /etc/ssh/ssh_host_dsa_key and ssh_host_dsa_key.pub. It should > > > be created by the start script as well. > > > > When I delete those two files, the start script recreates them, > > but I still get the same error. > > This happened on all my SuSE machines <7.2. Modify sshd_config: > "HostKey /etc/ssh/ssh_host_key" to "HostKey > /etc/ssh/ssh_host_dsa_key" When I do this, sshd says: "Disabling protocol version 1. Could not load host key" Specifying HostKey /etc/ssh/ssh_host_key HostKey /etc/ssh/ssh_host_dsa_key HostKey /etc/ssh/ssh_host_rsa_key solves the problem. -- Where do you want to be tomorrow? Entracom. Building Linux systems. http://www.entracom.de

1 0

RE: [suse-security] Squid 2.3.x (Maybe Off-Topic)
by Barry Gill 27 Mar '02

27 Mar '02

::Why don't you use identd? ::I use it here and I don't need to have user accounts at the proxy ::server. ::There are also identd servers also for Windows (I use them ::and it works ::fine). ::This way users don't need to type usernames or passwords and ::I can still ::control for whom and from which ip address access is allowed to the ::proxy server in the squid.conf. ::Works fine! Doing this, can you still set time of day based access? I set up a system where the authentication on the proxy for specific user groups will only be completed during specific times, do you know how to do this using identd?

1 0