Date: Wed, 12 May 2010 22:42:00 +0200 From: Matthieu Michaud <michaud.matthieu@gmail.com> To: stable@freebsd.org Subject: OpenSSH 5.4 bug fixed in 5.5 Message-ID: <4BEB1298.80408@nxdomain.fr>
next in thread | raw e-mail | index | archive | help
I would like to share a solution of a problem I faced with the current version of OpenSSH in 8-STABLE (5.4p1). Last upgrade of my system updated OpenSSH from 5.2p1 to 5.4p1 which has a regression for those using a non-default AuthorizedKeysFile option set to a relative path (".ssh/keys" in my case). If you are using the default you are not affected. As I had authentication mechanism restricted to public keys and this parameter expands to //.ssh/keys with the regression I wasn't able to access my server after restart. It's fixed in 5.5p1 which is not yet imported in the 8-STABLE branch. To get back this option working you either have to wait for 5.5p1 merge to 8-STABLE, install it yourself or import the following patch from the vendor and rebuild sshd. I opted for the last solution. Here's how I did it : cd /usr/src/crypto/openssh fetch -o - 'http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c.diff?r1=1.207;r2=1.204' | patch cd /usr/src/secure/usr.sbin/sshd make obj depend make all make install Hope it helps, Matthieu
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4BEB1298.80408>