Date: Sun, 30 Jun 2002 23:10:53 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Steven Lake <raiden@shell.core.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: SSH error Message-ID: <20020630221053.GA42558@happy-idiot-talk.infracaninophi> In-Reply-To: <Pine.GSO.4.44L0.0206301636500.28001-100000@shell.core.com> References: <Pine.GSO.4.44L0.0206301636500.28001-100000@shell.core.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jun 30, 2002 at 04:39:33PM -0500, Steven Lake wrote:
> Hi everybody! I was surfing my security logs on one of our boxes
> and I found a number of these errors preceeding a successful login entry.
>
> WARNING: /usr/local/etc/moduli does not exist, using old modulus
>
> Does anyone know what this means or what might be wrong? According to the
> logs I haven't seen this error for a few days, but the logs are filled
> with them prior to about 3 days ago.
If you've recently de-installed an openssh package from under
/usr/local and reinstalled openssh-portable with
-DOPENSSH_OVERWRITE_BASE, remember that you need to kill and restart
the sshd process for the update to take effect.
Otherwise you must have accidentally deleted one of the files used by
ssh. It's used as input data when setting up session encryption. ssh
will work without it, but you should probably replace the file as soon
as you can because it means that the encryption used by ssh on your
machine may not be as uncrackable as it should be.
If there's a file /etc/ssh/moduli then you can just copy that to
/usr/local/etc, or copy the file from another box, or you can pull the
file out of the openssh source code:
cd /tmp
tar -zxvf /usr/ports/distfiles/openssh-3.4p1.tar.gz openssh-3.4p1/moduli
cp openssh-3.4p1/moduli /usr/local/etc
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
Tel: +44 1628 476614 Marlow
Fax: +44 0870 0522645 Bucks., SL7 1TH UK
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020630221053.GA42558>