From owner-freebsd-questions Sat Mar 17 14:42:34 2001 Delivered-To: freebsd-questions@freebsd.org Received: from gforce.homelan.net (24-240-126-32.hsacorp.net [24.240.126.32]) by hub.freebsd.org (Postfix) with ESMTP id 01ACA37B718; Sat, 17 Mar 2001 14:42:30 -0800 (PST) (envelope-from glennpj@charter.net) Received: (from glenn@localhost) by gforce.homelan.net (8.11.3/8.11.3) id f2HMfsg04329; Sat, 17 Mar 2001 16:41:54 -0600 (CST) (envelope-from glenn) Date: Sat, 17 Mar 2001 16:41:48 -0600 From: Glenn Johnson To: Kris Kennaway Cc: questions@freebsd.org, green@freebsd.org Subject: Re: SSH not working with RhostsRSAAuthentication Message-ID: <20010317164148.A4230@gforce.homelan.net> Mail-Followup-To: Glenn Johnson , Kris Kennaway , questions@freebsd.org, green@freebsd.org References: <20010317114540.A2142@gforce.homelan.net> <20010317131122.C22890@mollari.cthul.hu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010317131122.C22890@mollari.cthul.hu>; from kris@obsecurity.org on Sat, Mar 17, 2001 at 01:11:22PM -0800 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Mar 17, 2001 at 01:11:22PM -0800, Kris Kennaway wrote: > On Sat, Mar 17, 2001 at 11:45:40AM -0600, Glenn Johnson wrote: > > > I have my sshd configured to accept RhostsRSAAuthentication. I > > have the approriate entry in /etc/hosts.equiv and verified > > that rsh works. I have the host public key put into > > /etc/ssh/ssh_known_hosts. However, ssh will not even try using > > RhostsRSAAuthentication as evidenced below: > > Put back the setuid bit: > > chmod u+s /usr/bin/ssh > > This should be documented in the manpage..I don't know why it wasn't. > Brian, could you do this prior to 4.3? > > Kris Thanks. I guess it follows then that for those tracking STABLE and who need this type of authentication, the following should be added to /etc/make.conf as well: ENABLE_SUID_SSH= true -- Glenn Johnson glennpj@charter.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message