[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: not checking ident in ssh?



Jill, I think it is unrelated to identd:

This is from /usr/src/usr.bin/ssh/sshd.c about 300 lines in:

                /* Read other side\'s version identification. */
                for (i = 0; i < sizeof(buf) - 1; i++) {
                        if (atomicio(read, sock_in, &buf[i], 1) != 1) {
                                log("Did not receive ident string from %s.", get _remote_ipaddr());                           
                                fatal_cleanup();
                        }                    
                        if (buf[i] == '\r') {
                                buf[i] = '\n';
                                buf[i + 1] = 0;
                                continue;
                        }
                        if (buf[i] == '\n') {
                                /* buf[i] == '\n' */
                                buf[i + 1] = 0;
                                break;
                        }
                }

I'd suggest trying the -V option as described in sshd(8). Let us know
how it works out. :)

[God I love well-commented code! :]

* Jill Lundquist <jill_(_at_)_kata_(_dot_)_chezns_(_dot_)_org> [001010 15:21]:
> I have a user who wants to connect to my openbsd machines using MacOS 9.
> The sshd is only using RSA, not falling back to passwords.  He sees 
> nothing for a long time, then I see "Did not receive ident string from <addr>"
> in the logs.
> 
> So it's obvious what's going on; either
> 
>   a) he needs to run identd or 
>   b) I need to configure sshd not to ask him for it.
> 
> Is there any way to do b)?  Or, off topic, has anyone got a pointer to a 
> decent identd for the mac (the one we downloaded sent his machine into
> some level or other of the Inferno, but heaven knows what that software
> was)?
> 
> I've hunted the misc archives, deja news, apple's website, and done
> random web searches.  Thanks for any help someone may provide.
> 
> Jill Lundquist		                     jill_(_at_)_chezns_(_dot_)_org
> "When debugging, the first thing to remember is that you are a dumbass."
>                                   -Bram Cohen, 26 Sept 2000
> 




Visit your host, monkey.org