This is the mail archive of the cygwin@sources.redhat.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Re: openSSH runs command= in authorized_keys? (Was W98 -- sshd )


On Sun, Dec 10, 2000 at 06:16:22AM +0200, Jari Aalto+mail.emacs wrote:
>* Thu 2000-12-07 Corinna Vinschen <cygwin@cygwin.com> list.cygwin
>* Message-Id: <00120723515909.04143@cobold>
>| On Thursday 07 December 2000 23:11, Jari Aalto+mail.emacs wrote:
>| 
>| > Authentication tried for jaalto with correct key but not from a
>| > permitted host ( host3.167.166.26, ip3.167.166.26).
>| > ---------------------------------------------------------------------
>| >-- # /etc/sshd_config -- Cygwin -- Open SSH 2.1.1
>| > # $Id$
>| > #
>| > # This is ssh server systemwide configuration file.
>| >
>| >
>| > Port		    22
>| > Protocol	    1,2
>| >
>| > # ListenAddress 0.0.0.0
>| > # ListenAddress ::
>| > # HostKey /etc/ssh_host_key
>| >
>| > ServerKeyBits	    768
>| > LoginGraceTime	    600
>| >
>| > KeyRegenerationInterval 3600
>| >
>| > #   Don't read ~/.rhosts and ~/.shosts files
>| >
>| > IgnoreRhosts	    no
>| 
>| Try setting
>| 
>| 	IgnoreRhosts yes
>| 
>| in your sshd_config file.
>
>Exllent, it almost permitted me to login, but now it tries to
>run this command
>
>   Accepted rsa for jaalto from 193.167.70.2 port 36312
>   debug1: session_new: init
>   debug1: session_new: session 0
>   debug1: Enabling compression at level 9.
>   debug1: Allocating a pty not permitted for this authentication.
>>>   debug1: Forced command '/users/jaalto/test.sh'
>
>Why does it want to run it, when I'm not connecting from X
>not Y? The line in my authorized_keys reads:
>
>command="/users/jaalto/test.sh",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,from="terra.cs.tpu.fi" 1024 37 ....KEY... acos-pwdless
>
>The client machine I used for connecting to Win98 sshd was
>
>    newton tmp % nslookup newton.tpu.fi
>    Server:  newton.tpu.fi
>    Address:  193.167.70.2
>
>    Name:    newton.tpu.fi
>    Address:  193.167.70.2
>
>
>It's t supposed to trigger only for specific domain addresses?

No.  The trigger is the public key in authorized_keys.  If you are logging in
from a host which is has the corresponding private key then you will trigger
this line.  This is openssh working as designed.

cgf

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]