RNG not initialised for sftp only under Solaris.
mouring at etoh.eviladmin.org
mouring at etoh.eviladmin.org
Wed Feb 7 06:23:08 EST 2001
Ahh.. a moment of truth. the init_rng(); does being in sftp.c due to:
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: expected_id = id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
sftp-client.c: id = arc4random();
Ok.. This makes much more sense.=)
- Ben
On Tue, 6 Feb 2001 mouring at etoh.eviladmin.org wrote:
>
> Out of the box on Solaris 2.7 using the internal entropy system. I am
> able to login but as soon as I get past the password prompt it dies
> because it claims the RNG is not initialised.
>
> Transcript:
> [..]
> debug: got SSH2_MSG_SERVICE_ACCEPT
> You have entered the land of dragons and mystical creatures. This server
> does not exist.
> debug: authentications that can continue: publickey,keyboard-interactive,password
> debug: next auth method to try is publickey
> debug: key does not exist: /home/lindstro/.ssh/id_dsa
> debug: next auth method to try is keyboard-interactive
> Password:
> debug: ssh-userauth2 successful: method keyboard-interactive
> debug: fd 6 setting O_NONBLOCK
> debug: fd 7 IS O_NONBLOCK
> debug: channel 0: new [client-session]
> debug: send channel open 0
> debug: Entering interactive session.
> debug: client_init id 0 arg 0
> debug: Sending subsystem: sftp
> debug: channel 0: open confirm rwindow 0 rmax 16384
> RNG not initialised
> [..]
>
> The solution is to add 'init_prng();' to the main() of sftp.c.
>
> Why sftp is caring about such things boggles my mind. =) Scp sure does
> not nor does sftp-server, and it was my impression (by glacing at the
> code) that sftp.c pretty much piggy backing ontop of ssh like scp.
>
>
> Looks to be somewhere in the interactive_loop() code.
>
> - Ben
>
>
More information about the openssh-unix-dev
mailing list