/etc/ssh/shosts.equiv ignored?

[Damien Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 4 Jan 2000, James Thompson wrote:

> 
> I'm trying to replace ssh 1.2.27 with openssh 1.2.1-pre*  
> 
> It seems that a openssh client accessing any openssh/ssh server I've setup
> always results in a password prompt.
> 
> It also seems that a openssh server requires ssh clients to provide a
> password regardless of the entries in the /etc/ssh/shosts.equiv file.  If
> I shut off the openssh server and run a ssh server then normal ssh client
> can connect without password prompts, openssh client still prompt for
> password.

Have you enabled "RhostsRSAAuthentication" in your sshd_config?

> One other oddity I've noticed in is using openssh as a rsh replacement for
> pine/imap.  Setting up pine to use imap via ssh replacement of rsh worked
> fine.  With openssh it always displays the password prompt and corrupts
> the screen.

What auth scheme are you using here?

> If I've overlooked something in the man pages (which are corrupted on a
> Solaris 2.6 install, nroff problem?) please point me at it.  
> 
> Also, what are the legal options for me providing patches to openssh since
> I'm in the US.  I've have some troubles with Solaris 2.6 installs with
> pre24 and pre19 but don't care to waste time debugging something I can't
> contribute back to the project.

The approach so far has been to allow patches from the USA so long as
they are not crypto related. 

Disclaimer: I am not a lawyer and this is not legal advice.

Regards,
Damien Miller

- --
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE4dABrormJ9RG1dI8RAk+TAKCl3nME006L5l8Ki6wtfuIgevcO0wCg0Om7
V4JU0AwUr+1v7jSPWC6t280=
=jYRJ
-----END PGP SIGNATURE-----