From owner-freebsd-security  Fri Nov 30 10: 1:13 2001
Delivered-To: freebsd-security@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP id 1688A37B416
	for <freebsd-security@FreeBSD.ORG>; Fri, 30 Nov 2001 10:01:10 -0800 (PST)
Received: from horsey.gshapiro.net (gshapiro@localhost [IPv6:::1])
	by horsey.gshapiro.net (8.12.2.Beta1/8.12.2.Beta1) with ESMTP id fAUI18ni095710
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Fri, 30 Nov 2001 10:01:08 -0800 (PST)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.2.Beta1/8.12.2.Beta1/Submit) id fAUI18D3095707;
	Fri, 30 Nov 2001 10:01:08 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15367.51556.94034.892901@horsey.gshapiro.net>
Date: Fri, 30 Nov 2001 10:01:08 -0800
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: "f.johan.beisser" <jan@caustic.org>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: OPIE and ssh
In-Reply-To: <20011130010137.C16958-100000@localhost>
References: <20011130010137.C16958-100000@localhost>
X-Mailer: VM 6.96 under 21.5  (beta3) "asparagus" XEmacs Lucid
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

jan> has anyone gotten OPIE to work with ssh?

Yep, use it every day.  All I did was:

cd /etc
rm skeykeys
ln -s opiekeys skeykeys
keyinit gshapiro

I also build S/Key with MD5 with this in my /etc/make.conf:

# Make MD5 version of libskey
.if ${.CURDIR} == "/usr/src/lib/libskey"
CFLAGS+=		-DMD5
.endif

My ~/.ssh/config contains (among other things):

# Defaults
Host *
	StrictHostKeyChecking	yes

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message