lsh-bugs

lsh-bugs@lists.lysator.liu.se

494 discussions

Proble loging in as non root !
by Manfred Gruber 23 Apr '03

23 Apr '03

Hi List ! I want to use lsh 1.4.2 on a distribution which I build myself. I have a problem login in as non root. Connecting to sftp-server or lshd as root works fine.Apr 18 14:43:55 192 lshd[370]: lshd: do_exec_shell: fixing up name of shell... I send you a part of the log: Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: argv0 = '-sh'. Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -u Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -g Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: After -i Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: Argument list: Apr 18 14:43:55 192 lshd[370]: lshd: 'lsh-execuv' Apr 18 14:43:55 192 lshd[370]: lshd: '-u' Apr 18 14:43:55 192 lshd[370]: lshd: '502' Apr 18 14:43:55 192 lshd[370]: lshd: '-g' Apr 18 14:43:55 192 lshd[370]: lshd: '100' Apr 18 14:43:55 192 lshd[370]: lshd: '-n' Apr 18 14:43:55 192 lshd[370]: lshd: 'ftpuser' Apr 18 14:43:55 192 lshd[370]: lshd: '-i' Apr 18 14:43:55 192 lshd[370]: lshd: '--' Apr 18 14:43:55 192 lshd[370]: lshd: '/bin/sh' Apr 18 14:43:55 192 lshd[370]: lshd: '-sh' Apr 18 14:43:55 192 lshd[370]: lshd: exec_shell: before exec i think the problem is here: Apr 18 14:43:55 192 lshd[370]: lshd: unix_user: exec failed (errno = 2): No such file or directory Apr 18 14:43:55 192 lshd[369]: lshd: lsh_oop_signal_callback: Signal 17, handler: reaper_callback Apr 18 14:43:55 192 lshd[369]: lshd: Child 370 died with exit code 1. Apr 18 14:43:55 192 lshd[369]: lshd: unix_process: do_logout_notice Apr 18 14:43:55 192 lshd[369]: lshd: unix_process.c: do_utmp_cleanup (HAVE_UTMPX_H) Apr 18 14:43:55 192 lshd[369]: lshd: server_session.c: do_exit_shell Apr 18 14:43:55 192 lshd[369]: lshd: server_session.c: Sending exit-status message on channel 0 Apr 18 14:43:55 192 lshd[369]: lshd: DEBUG: Sent CHANNEL_REQUEST lshd: (size 25 = 0x19) Apr 18 14:43:55 192 lshd[369]: 00000000: 62000000000000000b657869742d7374 b........exit-st 00000010: 617475730000000001 atus..... Apr 18 14:43:55 192 lshd[369]: lshd: write_buffer: do_write length = 56 Which file wants lshd to open there, maybe I have set the wrong permission to this special file. Thanx for help, regards -- mfg Manfred Gruber ==========================================

3 3

Fwd:Uncover The TRUTH
by connie farley 20 Apr '03

20 Apr '03

1 0

libspki (informal announce)
by nisse＠lysator.liu.se 11 Mar '03

11 Mar '03

This is the first informal announcement of libspki. SPKI, the Simple Public Key Infrastructure, is a sane way of using certificates. The original design is by Carl Ellison and Ron Rivest. The emphasis, at least from my point of view, is on association of authorization to keys (in contrast to X.509, which tries to bind X.500 names to keys), and on delegation of some or all of one's authorization. For some background, read RFC 2693. I think the primary applications where SPKI would be useful is in authentication (like public key ssh login, as well as host authentication), access control for various network servers, perhaps also peer-to-peer servers, etc. I've been working on an SPKI library from time to time since November last year. As the name promises, it *is* pretty simple. I have the most important features in place and it's still less than 7000 lines. For an example of what the objects look like, see the delegation testcase, <URL: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/lsh/src/spki/testsuite/delega…> The purpose if this announcement is to find out if there are any other people in the community who are interested in SPKI. I'm not in a desperate need for coding help, but I could really use feedback on the code and functionality: If the interfaces are reasonable or need generalization, which of the missing features are important, how to organize the directory of SPKI-related information, which parts are in the most need of documentation, etc. To me, SPKI seems like the obvious way to go whenever one needs public keys, and has the luxury of not having to be backwards compatible with X.509. (Actually, SPKI is designed so that it *can* interoperate with alien PKI stuff, such as X.509, but I'm not going to write that code any time soon). There's no polished distribution, so the easiest way to try out libspki is to pull the latest lsh from cvs. For further pointers and instructions, see <URL: http://www.lysator.liu.se/~nisse/libspki>. Please let me know what you think about it. Happy hacking, /Niels

1 0

ANNOUNCE: lsh-1.5.1
by nisse＠lysator.liu.se 01 Mar '03

01 Mar '03

This is the first release with the new code in libspki. Unfortunately there are some incompatible changes. See the comments in the lsh-upgrade for more information. There are currently no tools for converting private keys. This is also the first release that is made after xenofarm testing. See http://www.lysator.liu.se/~nisse/xeno-lsh/latest.html for recent results. I believe lsh-1.5.1 should compile out of the box on Linux and Solaris. There are minor problems on FreeBSD and HPUX that need to be sorted out. Other OS:es are mostly unknown, the other current client machines don't have the build dependencies (gmp and liboop) installed properly. If your favourite OS is missing on the list, you are encouraged to set up your own xenofarm client. See http://www.lysator.liu.se/xenofarm/ for more information, and mail me if you need any help in setting it up. News for the 1.5.1 release Incompatible change to key format, to comply with the current spki structure draft. You can use the script lsh-upgrade to copy and convert the information in the old .lsh/known-hosts to the new file .lsh/host-acls. The new code uses libspki. Fixed IPv6 bug reported by Simon Kowallik. lshd now does the equivalence of ulimit -n unlimited, this is inherited by processes started upon client requests. If you don't want this, you should use /etc/{profile,login,whatever} to set limits for your users. Do note that PAM-based solutions will NOT work as PAM is used from a separate process that terminates as soon as the authentication is finished (this of course goes for environment variables too). lsh and and lshg now parses options from LSHFLAGS and LSHGFLAGS, these are parsed before and can be overridden by the command line. As usual, available at http://www.lysator.liu.se/~nisse/archive/lsh-1.5.1.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-1.5.1.tar.gz Happy hacking, /Niels

1 0

Solaris 2.6 build problems
by Pete Naylor 16 Feb '03

16 Feb '03

I'm trying to build lsh on a Solaris 2.6 system using gcc 2.95.3. I've worked around a number of minor issues (no asprintf for building nettle examples, among other things) but now find myself stuck trying to configure lsh itself. Here is my configure command line... > ./configure --prefix=/opt/lsh --with-include-path=/opt/gmp/include:/opt/nettle/include:/opt/liboop/include --with-lib-path=/opt/gmp/lib:/opt/nettle/lib:/opt/liboop/lib ... and it always fails here... checking whether byte ordering is bigendian... yes checking for short... yes checking size of short... configure: error: cannot compute sizeof (short), 77 Is this a known issue with a quick fix? -- Pete Naylor

3 6

STRICTLY CONFIDENTIAL.
by MAGNUS SAVIMBI 29 Jan '03

29 Jan '03

Good day, My proposal to you will be very surprising, as we have not had any personal contact. However, I sincerely seek your confidence in this transaction, which I propose to you as a person of transparency,honesty and caliber. Let me first start by introducing myself properly to you. My name is Magnus Savimbi cousin and Personal Assistant of Jonas Malheiro Savimbi, the leader UNITA (National Union for the Total independence of Angola). I got your email address from network directory. I apologize if I have infringed on your privacy. You may know that my Uncle was recently killed in a battle with the government troops of Angola, led by President Dos Santos, on friday 22nd February, 2002. Now Mr. Antonio Dembo and general Paulo Lukamba who were my Uncle's second in command, has assumed office as leader of UNITA. In spite of this, UNITA is like a herd of cattle without shepherd. Prominent members like Carlos Morgado are still lobbying to oust them and assume office as leader to enrich themselves and some of them who see me as a threat to their ambitions, including General paula lukamba, are planning to kill me. For more information check www.angola.org. However, I am a young man who has ambitions and I am not in any way interested in wars, this is why I secretly left Angola and come here (Netherlands) to seek political asylum. I am sincerely seeking for your urgent help in respect to safe keeping of some of my Uncle's money that arose from Diamonds sales. This money (US$18.5million), was already on its way to my Uncle's Swiss Bank account. It was on transit with a safe deposit company here in Netherlands, when the tragic incident of my Uncle's death occurred. As a matter of fact, this is the reason I chose to come to Netherlands to seek political asylum. It is very clear with the way things are now, that President Dos Santos will lobby the International Community to freeze my Uncle's assets and accounts abroad, to ground UNITA, since he has already done this in Angola. I plan to use this money to safeguard my future. It is very essential that you understand that the kind of trust and confidence I want to put in you is extraordinary, and an act of desperation on my part, in order not to lose this money. Please, treat this contact with utmost secrecy and confidentiality for security and safety reasons. The help I need from you is clearing the box containing the funds from the security and finance company, after which, it will be deposited in an account in your name, with my name as next of kin. The money shall remain in your custody till my asylum application is granted, and I have the permit to conduct business, then you will transfer the account to me. Meanwhile, the money can be invested into risk-free profitable ventures, and there will an agreement to protect my interest. I have all the documents that will enable you claim the consignment from the security and finance company. For your reliable assistance, I will reward you with 15% of the money, and we shall use 5% to carry out every expenses that we come across during the process of this transaction and the investment process. The remainder of the 5%, shall be given to a charity of your choice.75% will be for my familys investment in your country. I thank you in advance in anticipation for your assistance in enabling me achieve this goal. Please contact me whether or not you are interested in assisting me. This will enable me scout for another partner in the event of non-interest on your part. NOTE:your prompt response will be appreciated. Sincerely, Magnus Savimbi.

1 0

PRIVATE
by ROBERT SAVIMBI 24 Jan '03

24 Jan '03

Good day, My proposal to you will be very surprising, as we have not had any personal contact. However, I sincerely seek your confidence in this transaction, which I propose to you as a person of transparency,honesty and caliber. Let me first start by introducing myself properly to you. My name is Robert Savimbi cousin and Personal Assistant of Jonas Malheiro Savimbi, the leader UNITA (National Union for the Total independence of Angola). I got your email address from network directory. I apologize if I have infringed on your privacy. You may know that my Uncle was recently killed in a battle with the government troops of Angola, led by President Dos Santos, on friday 22nd February, 2002. Now Mr. Antonio Dembo and general Paulo Lukamba who were my Uncle's second in command, has assumed office as leader of UNITA. In spite of this, UNITA is like a herd of cattle without shepherd. Prominent members like Carlos Morgado are still lobbying to oust them and assume office as leader to enrich themselves and some of them who see me as a threat to their ambitions, including General paula lukamba, are planning to kill me. For more information check www.angola.org. However, I am a young man who has ambitions and I am not in any way interested in wars, this is why I secretly left Angola and come here (Netherlands) to seek political asylum. I am sincerely seeking for your urgent help in respect to safe keeping of some of my Uncle's money that arose from Diamonds sales. This money (US$18.5million), was already on its way to my Uncle's Swiss Bank account. It was on transit with a safe deposit company here in Netherlands, when the tragic incident of my Uncle's death occurred. As a matter of fact, this is the reason I chose to come to Netherlands to seek political asylum. It is very clear with the way things are now, that President Dos Santos will lobby the International Community to freeze my Uncle's assets and accounts abroad, to ground UNITA, since he has already done this in Angola. I plan to use this money to safeguard my future. It is very essential that you understand that the kind of trust and confidence I want to put in you is extraordinary, and an act of desperation on my part, in order not to lose this money. Please, treat this contact with utmost secrecy and confidentiality for security and safety reasons. The help I need from you is clearing the box containing the funds from the security company, after which, it will be deposited in an account in your name, with my name as next of kin. The money shall remain in your custody till my asylum application is granted, and I have the permit to conduct business, then you will transfer the account to me. Meanwhile, the money can be invested into risk-free profitable ventures, and there will an agreement to protect my interest. I have all the documents that will enable you claim the consignment from the security company. For your reliable assistance, I will reward you with 15% of the money, and we shall use 5% to carry out every expenses that we come across during the transaction and the investment process. The remainder of the 5%, shall be given to a charity of your choice. I thank you in advance in anticipation for your assistance in enabling me achieve this goal. Please contact me whether or not you are interested in assisting me. This will enable me scout for another partner in the event of non-interest on your part. NOTE:your prompt response will be appreciated. GOD BLESS. Sincerely, R.Savimbi.

1 0

BANDS WANTED FOR NEW YORK TV MUSIC SHOW
by markafterdark 19 Jan '03

19 Jan '03

The MARKafterDARK cable rock show is currently seeking bands to feature on the new spring season of shows. For more details please go to http://www.markafterdark.com (no emails please) Please note this mail is intended for musicians and bands who have openly posted their contact email address for the purpose of receiving enquiries. Should you receive this mail and do not fall into this catagory, please accept our apologies.

1 0

Some news: spki & xenofarm
by nisse＠lysator.liu.se 16 Jan '03

16 Jan '03

I guess it's time for a status update. Lately, I've been working on two things with lsh, spki and xenofarm, which I'd like to talk a little about. SPKI Simple Public Key Infrastructure is a way of dealing with things like certificates, names, delegations, and acl:s, that actually makes some sense. Using spki for lsh is something I've wanted to do for a *long* time. At last I've written some new code, replacing the partial SPKI implementation that has been in lsh for a while. The new library is called "libspki", and there's a modest homepage at <URL: http://www.lysator.liu.se/~nisse/libspki/>. This doesn't yet make any huge difference, it's still only acl:s that are supported. To do real certificates, I need to implement a few more functions in the library, and I need tools for creating and managing the certificates. There are subtle differences to the key formats, and not so subtle changes to the known_hosts key file, to make it conform to the latest spki drafts. The latter file is replaced by a file .lsh/host-acls, that can contain acl:s in human readble syntax. I.e. instead of ; ACL for host sture.lysator.liu.se {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} one will have (acl (entry (subject (public-key (dsa (p |ANVabPkWKkvb03IW5kocIBuT1WrUU7 E3C2Tk0ZcUno6316qPKcLPr/dOntA1 rO93zRt+OUhhIR4eXhIb8tMs47ghrJ SlVMmDxOKOtu/fObk17N8gVE9UriF2 8axBuo+xXnev4tu6VhI6P9jg9WJ+4i Vjr8//G8KGGDLDS83LOHun|) (q |AKkGKsa47cbG9Cv/X5LPo9uZqxT7|) (g |U3ZwwhJ5r1RTeeLaNHCREEHk8rTStn +krOsd4lprAsKmMM/6oC4HQ6sSw5LB uuNbGht55zql8MENFkLedCRzRsAwxh S/SV1TGXq8XocDkYSnDG0YiJIsgwRg l1KZBXQEksXUWT1ZieT+iVETVnBhaw z//wfSHgTHHaFdEYMQYg0=|) (y |TvC37H4HafXw0zTromi11tkhxtqUpp 5l2nLlv7LyA3Gu+SxPZ5x/qI1gI8K5 M1ePYQw41S2a9aDZtESoPvZnpSXpJn EsOAwJl8LbRKJ6HPFSsXme6GlmnqhR P4veZooWpCGf+w08p5Hry7rvupOQUB IVMSgE5iu5991qMjJJOqw=|)))) (tag (ssh-hostkey se.liu.lysator.sture)))) There's a script lsh-upgrade to help with the conversion. To reflect these changes and incompatibilities, the next "stable" release should probably be called lsh-2.0. I hope to get some more spki features by then. The point is that there should be a single key for a site, such as lysator.liu.se. That key can be used to sign all the host keys on the site, and then there's only a single key that the user need to fingerprint. And when that works, I'd like to hack spki support for user authentication as well. XENOFARM Xenofarm is a distributed build system aimed to find bugs and portability problems. A build package is created automatically soon after any change have been checked in. A build client fetches new packages, compiles and tests them, and then sends the result back to a central server that keeps track of all results. The web-page generation is not yet fully automated, but you can look at the temporary result page at <URL: http://www.lysator.liu.se/~nisse/xeno-lsh/latest.html> to get an idea of what it's about. As you can see, so far most or all of the build machines lack some of the prerequisites for an lsh build. I need to install gmp, liboop or both. Setting up a xenofarm client is a good way to help get lsh properly tested on your favourite platform. You can either get xenofarm directly from it's cvs repository, or download a client package. See http://www.lysator.liu.se/xenofarm/download.xml. In the latter case, you also need the client configuration for lsh, <URL: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/xenofarm/projects/lsh/lsh.cfg…>. Some other projects that you also can build with xenofarm are Pike and Python (two nice scripting languages) and lyskom-server, which is a pretty cool discussion group software. Happy hacking, /Niels

1 0

>>Last Chance...15.2 MILLION EMAIL ADDRESSES...PLUS $2,000 IN FREE EMAIL MARKETING SOFTWARE!
by Mary Susan 06 Jan '03

06 Jan '03

WOULD YOU LIKE TO HAVE YOUR MESSAGE SEEN BY OVER 15.1 MILLION TARGETED PROSPECTS DAILY? Below contains all the information you will ever need to market your product or service on the Internet. If you have a product, service, or message that you would like to get out to Thousands, Hundreds of Thousands, or even Millions of people, you have several options. Traditional methods include print advertising, direct mail, radio, and television advertising. They are all effective, but they all have two catches: They're EXPENSIVE and TIME CONSUMING. Not only that, you only get ONE SHOT at making your message heard by the right people. Also, Internet Search Engine Submissions, Classified Ads, Newsgroup Postings simply DO NOT WORK effectively. Now this has all changed! Thanks to the top programmers in the world and their NEW EMAIL TECHNOLOGY, You can send millions of email messages daily for FREE...Without getting terminated from your current Internet connection! It's very simple to do and you can be increasing your sales within minutes of installing this new extraordinary software! Besides...It's the only real way to advertise on the Internet that works...Period! >>>WE WILL SUPPLY YOU WITH OVER 15.1 MILLION OPT-IN EMAIL ADDRESSES TO GET YOU STARTED RIGHT AWAY! >>>PLUS FREE EMAIL ADDRESS DOWNLOADS FOR LIFE! >>>ALSO, YOU WILL RECEIVE $2,000 WORTH OF EMAIL MARKETING SOFTWARE FREE! Including...... BROADCAST EMAIL SENDING SOFTWARE...(send millions of email advertisements daily with a few clicks of your mouse, without getting your ISP trerminated. We used the same software to send you this email) EMAIL EXTRACTION SOFTWARE...(retrieve new targeted email addresses daily. Hundreds of thousands of them) LIST MANAGEMENT SOFTWARE...(keep your lists clean, opt-in and manage all your remove requests, leads, sales etc...) and much...much more! Hurry...This extraordinary offer ends at midnight tonight! To find out more information, Do not respond by email. Instead, click on the link below or copy and paste the exact web site address below into your web browser. http://www.vvorldvvideventures.com/504305/addresses.htm ______________________________________________________ Want to be removed from our email list? You were sent this email because you used our Opt-in service. We hope you enjoy reading our messages. However, if you'd rather not receive future e-mails from us, Go to our remove page at http://www.vvorldvvideventures.com/504305/remove.htm _______________________________________________________

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

lsh-bugs