Built 'openssh-SNAP-20140301' on Solaris 10 with 'gcc'; no errors; 'ssh' as 'root' now works (failed with 6.5p1). 2 issues: In 'ssh_config', setting: KexAlgorithms diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 used to allow connections to Cisco routers to work, but now the connection attempt hangs. With the current version, any one of: KexAlgorithms diffie-hellman-group-exchange-sha1 KexAlgorithms diffie-hellman-group14-sha1 KexAlgorithms diffie-hellman-group1-sha1 KexAlgorithms diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 works, but this hangs: KexAlgorithms diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 On Sat, 1 Mar 2014, mancha wrote:
$ ./configure && make tests sysconfdir=$(pwd) This could be forced in the makefile's test target so it works automagically.
'make tests', 'make tests sysconfdir=$PWD' and 'make tests sysconfdir=/etc/ssh' all fail with: ... sftp permissions: read-only upload sftp permissions: read-only setstat postcondition check failed: setstat readonly sftp permissions: read-only rm sftp permissions: read-only mkdir sftp permissions: read-only rmdir sftp permissions: read-only posix-rename sftp permissions: read-only oldrename sftp permissions: read-only symlink sftp permissions: read-only hardlink sftp permissions: explicit open sftp permissions: explicit read sftp permissions: explicit write sftp permissions: explicit lstat sftp permissions: explicit opendir sftp permissions: explicit readdir sftp permissions: explicit setstat postcondition check failed: setstat blacklisted postcondition check failed: setstat not in whitelist sftp permissions: explicit remove sftp permissions: explicit mkdir sftp permissions: explicit rmdir sftp permissions: explicit posix-rename sftp permissions: explicit rename sftp permissions: explicit symlink sftp permissions: explicit hardlink sftp permissions: explicit statvfs failed sftp permissions make[1]: *** [t-exec] Error 1 with lots of 'Unsupported query "cipher-auth"' messages before that point. Mike -- Mike Peterson Information Security Analyst - Audit E-mail: mikep@xxxxxxxxxxxxxxx WWW: http://www.noc.utoronto.ca/ Tel: 416-978-5230 Fax: 416-978-6620 _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
