Re: privsep checking

[Nick Nauwelaerts <nick@wanadoo.be>]

On Tue, 25 Jun 2002 13:48:50 -0600
Derick Siddoway <derick@bitflood.net> wrote:

> > it didn't help either.  I checked to see if /etc/sshd_config was
> > copied:
> > 
> > 	grep -i priv /etc/sshd_config
> > 	#UsePrivilegeSeparation yes
> 
> See the '#' at the beginning of the line?  That means that the line
> is a comment.

Not quite relevant. In OpenSSH 3.2.3 & 3.3 privilege separation is
enabled by default, you have to turn it off explicitly. So it will be on
unless the sshd_conf also contains a UsePrivilegeSeparation no.
Check if UseLogin is set to no (which is default) but that had me going
this morning, even though it's explained in the manpage. Also check if
the correct version of ssh is installed with ssh -V, and make sure that
the sshd is restarted.

// nick