Strange interaction of sftp and protocol version 1

Gordon Rowell gordonr at e-smith.com
Mon May 21 22:09:10 EST 2001


As I read the manpage, you need to enable Subsystems to have the server 
support them. 

     [...]
     Subsystem
             Configures an external subsystem (e.g., file transfer daemon).
             Arguments should be a subsystem name and a command to execute up­
             on subsystem request.  The command sftp-server(8) implements the
             ``sftp'' file transfer subsystem.  By default no subsystems are
             defined.  Note that this option applies to protocol version 2 on­
             ly.
     [...]

Are both of the following statements meant to be true?
	- Subsystems must be defined for the server to support them
	- Protocol version 1 does not support subystems

For Linux, I need the following to enable sftp:

    Subsystem      sftp    /usr/libexec/openssh/sftp-server

However, if I comment out/remove this line and restart sshd, I can still
start sftp when using Protocol version 1. 

  [gordonr at icedvovo]$ sftp timtam
  Connecting to timtam...
  Password: 
  Request for subsystem 'sftp' failed on channel 0
  Connection closed

This is fine - no DSA key, so fallback to password, then fail as sftp is
not enabled.

  [gordonr at icedvovo]$ sftp -1 timtam
  Connecting to timtam...
  Enter passphrase for RSA key 'gordonr at xxxxx': 
  sftp> 

OK, we have an RSA key, which works and then sftp starts and works.

Is this the correct behaviour?

Client and server are openssh-2.5.2p2-1.7.2

Gordon
--
  Gordon Rowell                         gordonr at e-smith.com
  http://www.e-smith.org (development)  http://www.e-smith.com (corporate)
  e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada




More information about the openssh-unix-dev mailing list