From owner-freebsd-stable@FreeBSD.ORG Wed May 12 21:22:58 2010 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 314751065677 for ; Wed, 12 May 2010 21:22:58 +0000 (UTC) (envelope-from peter@simons-rock.edu) Received: from hedwig.simons-rock.edu (hedwig.simons-rock.edu [208.81.88.14]) by mx1.freebsd.org (Postfix) with ESMTP id 0D8888FC16 for ; Wed, 12 May 2010 21:22:56 +0000 (UTC) Received: from cesium.hyperfine.info (c2.8d.5646.static.theplanet.com [70.86.141.194]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hedwig.simons-rock.edu (Postfix) with ESMTP id AEEA02BB346; Wed, 12 May 2010 17:22:55 -0400 (EDT) Date: Wed, 12 May 2010 17:22:54 -0400 From: "Peter C. Lai" To: Matthieu Michaud Message-ID: <20100512212254.GQ56212@cesium.hyperfine.info> References: <4BEB1298.80408@nxdomain.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4BEB1298.80408@nxdomain.fr> User-Agent: Mutt/1.5.17 (2007-11-01) Cc: stable@freebsd.org Subject: Re: OpenSSH 5.4 bug fixed in 5.5 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 May 2010 21:22:58 -0000 Or install the version from ports and deactivate the base version... On 2010-05-12 10:42:00PM +0200, Matthieu Michaud wrote: > I would like to share a solution of a problem I faced with the current > version of OpenSSH in 8-STABLE (5.4p1). > > Last upgrade of my system updated OpenSSH from 5.2p1 to 5.4p1 which has a > regression for those using a non-default AuthorizedKeysFile option set to a > relative path (".ssh/keys" in my case). If you are using the default you > are not affected. > > As I had authentication mechanism restricted to public keys and this > parameter expands to //.ssh/keys with the regression I wasn't able to > access my server after restart. > > It's fixed in 5.5p1 which is not yet imported in the 8-STABLE branch. > > To get back this option working you either have to wait for 5.5p1 merge to > 8-STABLE, install it yourself or import the following patch from the vendor > and rebuild sshd. I opted for the last solution. Here's how I did it : > > cd /usr/src/crypto/openssh > > fetch -o - > 'http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c.diff?r1=1.207;r2=1.204' > | patch > > cd /usr/src/secure/usr.sbin/sshd > make obj depend > make all > make install > > Hope it helps, > Matthieu > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" -- =========================================================== Peter C. Lai | Bard College at Simon's Rock Systems Administrator | 84 Alford Rd. Information Technology Svcs. | Gt. Barrington, MA 01230 USA peter AT simons-rock.edu | (413) 528-7428 ===========================================================