IPv6 + user at ipaddress

Damien Miller djm at mindrot.org
Sun Oct 3 11:12:20 EST 2004


Healy wrote:
> Using:
> Solaris 8.0
> OpenSSH OpenSSH_3.8p1
> 
> 
> I believe I may have found a bug when dealing with restricting user at ipv6address 
> in cases when adjacent colons do not expand to multiple fields.
> 
> For example:
> If I have any of the following entries in sshd_config, it will let me in:
> 
> user at 1234:0234:0234:0000:0234:1234:1234:1234
> user at 1234:234:234:0000:234:1234:1234:1234
> user at 1234:234:234:0:234:1234:1234:1234
> 
> However, if I reduce the address as much as possible, to the below entry it will 
> reject my login attempt:

We will need server debug logs if we are to help here, but I suspect a
bug in your systems getnameinfo(). Have you applied all your OS patches?

-d




More information about the openssh-unix-dev mailing list