lsh-bugs

lsh-bugs@lists.lysator.liu.se

494 discussions

Build and test failures with git master
by Simon Josefsson 11 Mar '26

11 Mar '26

Hi! The current release is from 2013, do you think it is time for another release? I'm looking into reviving the lsh-utils package in Debian to see if it can be made to work in a modern environment. While doing so I wanted to build git master so that I can bisect things to see if I can find upstream commits that fixes known issues in version 2.1. However, it seems -Wincompatible-pointer-types is now a fatal error in some GCC configurations (I'm using one derived from Debian gcc in trixie), so building git master failed for me: lsftp.c:179:17: error: passing argument 1 of ‘do_gnu_stuff’ from incompatible pointer type [-Wincompatible-pointer-types] Building with `make CC=-Wno-error=incompatible-pointer-types` is a workaround, but would be better if you could patch the code? Thanks, /Simon

2 1

LSH with newer Nettle and readline
by Roman Riabenko 02 Mar '26

02 Mar '26

Hello! It loooks like the realeased version of LSH 2.1 does not build with Nettle 3 or versions of readline after 6.2. Debian used to maintain patches for that. Are there any plans to release a newer LSH version, which could be built with Nettle 3 and newer readline? Thank you for developing LSH! Roman

2 1

lsh 2.1 build-error against nettle 4.0
by Andreas Metzler 01 Mar '26

01 Mar '26

Hello, I tried to build lsh 2.1 against nettle 4 and ended up with: receive.c: In function ‘rsync_receive’: receive.c:130:33: error: passing argument 2 of ‘nettle_md5_digest’ makes pointer from integer without a cast [-Wint-conversion] 130 | md5_digest(&s->sum_md5, MD5_DIGEST_SIZE, s->buf); | ^~~~~~~~~~~~~~~ | | | int In file included from rsync.h:28, from receive.c:13: /usr/include/nettle/md5.h:73:21: note: expected ‘uint8_t *’ {aka ‘unsigned char *’} but argument is of type ‘int’ 73 | uint8_t *digest); | ~~~~~~~~~^~~~~~ receive.c:130:9: error: too many arguments to function ‘nettle_md5_digest’; expected 2, have 3 130 | md5_digest(&s->sum_md5, MD5_DIGEST_SIZE, s->buf); | ^~~~~~~~~~ /usr/include/nettle/md5.h:72:1: note: declared here 72 | md5_digest(struct md5_ctx *ctx, cu Andreas

1 0

lsh-server option analogous to openssh-server "PermitTTY yes" ???
by will.code.for.pizza＠gmail.com 03 Dec '20

03 Dec '20

Hi, on my server, I am running lsh-server 2.1-12 and trying to connect via OpenSSH_8.2p1 on client side. On server, a user with passwordless sudo exists. --------------------------- user ALL=(ALL) NOPASSWD:ALL --------------------------- >From client side, I try (in different combinations) $ sshpass -p xxx ssh -t -i /tmp/test_id_rsa.pub -o KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes256-cbc user@$server 'sudo shutdown -h now' I have to mention, that an ssh-copy-id with... $ sshpass -p xxx ssh-copy-id -i /tmp/test_id_rsa.pub -o KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes256-cbc user@$server ...seems not to work, too. What I get: [sudo] password for user: or sudo: a password is required or sudo: no tty present and no askpass program specified Does someone in the group have the knowledge hot to connect correctly? Many thanks! Will Code

2 1

Re: gnu lsh?
by nisse＠lysator.liu.se 01 Jun '19

01 Jun '19

"Alfred M. Szmidt" <ams(a)gnu.org> writes: > Is GNU lsh still being maintained? I still use it, but there are some > compilation issues, and what not on some platforms. There seems to > have been no activity on the code base for a while. It's barely maintained, I'm afraid. It would need a new maintainer or co-maintainer. I use it myself, obviously, but I tend to use the development version (what's intended to be lsh-3.0), not the latest release. But I spend most of my hacking time on the Nettle library these days, and I struggle to get enough time to do that well, too. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid 368C6677. Internet email is subject to wholesale government surveillance.

1 0

/etc/environment not honored by lshd
by ludo＠gnu.org 16 Dec '15

16 Dec '15

Hello! Somehow /etc/environment isn’t honored when logging in via SSH to an lshd server running on GuixSD, despite the fact that /etc/pam.d/lshd has this: --8<---------------cut here---------------start------------->8--- account required pam_unix.so auth required pam_unix.so password required pam_unix.so sha512 shadow session required pam_env.so session required pam_unix.so --8<---------------cut here---------------end--------------->8--- Ludo’.

2 2

Re: Time for an lsh release
by nisse＠lysator.liu.se 11 Dec '15

11 Dec '15

ludo(a)gnu.org (Ludovic Courtès) writes: > (This is due to the Guix setup where by default nothing would be found > in $PATH; patch attached. That's a pretty non-standard environment... Processes spawned for a user by lshd get a pretty trimmed down initial environment, with PATH set to /bin:/usr/bin or something close. If standard unix tools aren't found there, then I think you'd need to either * have the shell startup files setup a working path (ssh "shell" is implemented by spawning a login shell, and "exec" by starting a shell with -c command-line-string). * Or some option to lshd to let child processes inherit PATH or set it to a specific value. Not sure if it's appropriate to use that when running the tests, though. There's a related hack to inherit HOME in some circumstances. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 4

lsh cannot forward UNIX domain sockets
by Thompson, David 10 Dec '15

10 Dec '15

Hello! I'm new to lsh. Lshd is the default SSH server on GuixSD, and so I found myself using it over OpenSSH. However, I found that I cannot use the port forwarding features with UNIX domain sockets. I'm used to being able to do this as the OpenSSH server supports it. It would be really great to add this feature. Any estimate on how much work it would involve or other thoughts? Thanks! - Dave

2 1

Re: Time for an lsh release
by nisse＠lysator.liu.se 03 Dec '15

03 Dec '15

ludo(a)gnu.org (Ludovic Courtès) writes: > … I’m getting test failures: > lsh, test 1 > Closed spurious fd 10 > Closed spurious fd 5 > FAIL: lsh-1 It seems all tests actually trying to make a connection fails. To find out how it fails, you can try adding a set -x in the lsh-1-test script, and/or add -v or even --debug to LSH_FLAGS when running the tests. Or try running the newly built lsh client manually, to see if it's a client or server problem. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Time for an lsh release
by ludo＠gnu.org 02 Dec '15

02 Dec '15

Hi! I realize my previous message¹ went unanswered: OpenSSH 6.7 removed all CBC, among others, from its default cipher suites (see <http://www.openssh.com/txt/release-6.7>.) As a consequence, the SSH client from lsh 2.1 cannot connect to a recent OpenSSH server by default. Instead, one needs to pass ‘-c aes256-ctr’, which is one of the few ciphers in common. I think it would make sense to make a new lsh release that would at least change the default set of cipher suites to follow what OpenSSH did. WDYT? I think this is one of the things urgently needed if we want to allow people to keep using lsh/lshd, along with applying the Nettle 3 upgrade patch². Thanks, Ludo’. ¹ http://lists.lysator.liu.se/pipermail/lsh-bugs/2015q3/000664.html ² http://lists.lysator.liu.se/pipermail/lsh-bugs/2015q3/000662.html

2 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

lsh-bugs