Re: Dropbear calling my own command-line parser than /bin/sh.

2006-07-14 Thread Matt Johnston
On Fri, Jul 14, 2006 at 06:13:44PM -0700, Prasad wrote: Hi all, How do i make dropbear call my own utility/command-line parser which has its own way of checking the username and password and does some other work. Have a look at svr_auth_password() in svr-authpasswd.c for how the existing

Re: Dropbear calling my own command-line parser than /bin/sh.

2006-07-18 Thread Matt Johnston
On Tue, Jul 18, 2006 at 02:00:49PM +0800, Matt Johnston wrote: On Mon, Jul 17, 2006 at 09:53:52PM -0700, Prasad wrote: So now i want to totally skip the regular username and password in the SSH and directly call my commandline interpreter (which has a password autentication by itself). How

Re: dropbear rssh chroot

2006-07-26 Thread Matt Johnston
On Thu, Jul 27, 2006 at 05:05:47PM +1200, Karl. wrote: OK. After the encouragement of being told it should work, I managed to find the problem while gathering the documentation for my Why doesn't it work? email :-) Here's the relevant info: syslog for openssh attempt shows: Jul 27

Re: 'received data with bad writefd'

2006-08-19 Thread Matt Johnston
On Thu, Aug 17, 2006 at 04:10:59AM -0700, Haseeb Abdul Qadir wrote: Hi, When using dropbear for port forwarding only (no command shell, no pty) the sever sometimes unexpectedly exits with: [21929] Aug 17 06:29:01 exit after auth (haseebq): received data with bad writefd Its not a 100%

Re: [Dropbear] Question about username/password authentication

2006-09-11 Thread Matt Johnston
On Mon, Sep 11, 2006 at 10:35:23AM +0800, Vincent wrote: Drar Matt: I'm porting Dropbear 0.48.1 into my embedded linux system. My authentication policy is to replase default /etc/password with my own username/password library. But in svr-authpasswd.c, function void svr_auth_password(), I

Re: Public key issue

2006-11-02 Thread Matt Johnston
On Thu, Nov 02, 2006 at 10:24:44AM +, Sunnyday wrote: I have trouble with using public key. Drobear server is running on openwrt Version is 0.48 Client is running on linux version 0.48.1 with debug option. I created key with dropbearkey. I copy public key to ~.ssh/authorized_keys

Re: sftp-server

2007-01-18 Thread Matt Johnston
(CCing the Dropbear list since it might be of interest) On Thu, Jan 18, 2007 at 12:55:53PM +1100, John wrote: I'm using an editor called ultraedit, which has the capability of editing remote files through the use of ftp/sftp, and I am not sure where to start in getting sftp to work with

Re: Dropbear 0.49pre build error and a ssh glitch

2007-01-31 Thread Matt Johnston
On Mon, Jan 29, 2007 at 08:37:41PM -0800, William Trenker wrote: Hi Matt, I've been working with the latest development version in MTN. Specifically I'm building from: http://viewmtn.angrygoats.net/revision/tar/d26d5eb2837f46b56a33fb0e7573aa0201abd4d5 There is a small Makefile problem

Re: scp client hangs after authentication with dropbear server

2007-02-07 Thread Matt Johnston
On Wed, Feb 07, 2007 at 11:58:55AM -0600, Steven Hein wrote: Steven Hein wrote: I have the dropbear server running on a PPC-based embedded board. I can ssh into it just fine. But when I try to scp to or from this dropbear server (using an openssh scp client, that's the only one I've

Re: Dropbear on ppc405

2007-06-19 Thread Matt Johnston
On Tue, Jun 19, 2007 at 04:19:48PM +0200, Miroslaw Dach wrote: Dear All, I am new user of dropbear. I have compiled it successfully for ppc405 with option multi. I have tried to start the server on my embedded target board. First I have logged in as user root: After I did:

Re: Change server timeout connection

2007-07-31 Thread Matt Johnston
On Tue, Jul 31, 2007 at 11:46:42AM +0100, Rui Santos wrote: Hi, When I try to edit a file using KDE fish, I have to login every ~5 minutes in order to save the changes. I haven't found any way to setup a different timeout value. Is the any way to accomplish that ? The timeout isn't

Re: dropbear authentication

2007-08-08 Thread Matt Johnston
On Wed, Aug 08, 2007 at 08:25:00AM +0200, Giuseppe Cavallaro wrote: Hi All, ho can I login as root user with an empty password? Do I need to hack the code or I have to configure dropbear in special way? It already should work. As a test, I set up the root user on an Ubuntu 7.04 system to

Re: dropbear authentication

2007-08-08 Thread Matt Johnston
On Wed, Aug 08, 2007 at 09:53:12AM +0200, Giuseppe Cavallaro wrote: Just another question: Is it possible to totally skip authentication phase with dropbear? I mean, using telnet or ssh (but configuring the latter) I'm able to login without entering password and login. In this case my root

Dropbear 0.50 release

2007-08-08 Thread Matt Johnston
Hi. Dropbear 0.50 is released. It has a few small features and a few bugfixes. The most significant improvement is probably the network performance. Cheers, Matt 0.50 - Wed 8 August 2007 - Add DROPBEAR_PASSWORD environment variable to specify a dbclient password - Use /dev/urandom by default,

Re: Non-interactive commands

2007-09-08 Thread Matt Johnston
On Sat, Sep 08, 2007 at 10:35:24PM +0200, Micha Nelissen wrote: Hi, The following doesn't work: $ echo 'echo hello' | ssh host /bin/sh If host is running dropbear. OTOH, if host is running OpenSSH, I get 'hello' echoed back to me. Which version of Dropbear is the server running? 0.49

Re: Aiee, segfault! You should probably report this as a bug to the developer

2007-09-09 Thread Matt Johnston
On Thu, Sep 06, 2007 at 03:51:04PM -0700, Jean Pierre Sainfeld wrote: Hi, I would be thankful if somebody could help me with this issue. The conditions of the test are as follows: 1) the test is done on the host or the target ( X86, ARM9 ) respectively. It is done only on one side. i.e

Re: sftp client for dropbear

2007-09-17 Thread Matt Johnston
On Mon, Sep 17, 2007 at 10:25:49AM +0200, Roberto A. Foglietta wrote: Hi to all folks, do you know a sftp client which could work with dropbear? I tried which one comes with OpenSSH but does not work. In case there is not any sftp client for dropbear do you think adapting openssh one it

Re: sftp client for dropbear

2007-09-17 Thread Matt Johnston
On Mon, Sep 17, 2007 at 02:52:58PM +0200, Roberto A. Foglietta wrote: 2007/9/17, Matt Johnston [EMAIL PROTECTED]: On Mon, Sep 17, 2007 at 10:25:49AM +0200, Roberto A. Foglietta wrote: Hi to all folks, do you know a sftp client which could work with dropbear? I tried which one

Re: Dropbear server 0.50 stops listening to socket when started without stdin

2007-09-20 Thread Matt Johnston
On Wed, Sep 19, 2007 at 03:18:47PM +0200, Laurent Pinchart wrote: Hi, The 2007-07-19 commit (Patch from Nicolai Ehemann to try binding before going to the background, so that if it exits early (because something's already listening etc) then it will return an exitcode of 1.) breaks

Re: ssh logging without a password

2008-02-19 Thread Matt Johnston
On Tue, Feb 19, 2008 at 05:25:47PM +0100, Dach Miroslaw wrote: I do not know where to put the file id_dsa.pub since on the B server there is no directory /root/.ssh but just a regular file instead. It seems to be that dropbear accepts the dss key type but on the client one can choose the

Re: Dropbear 0.50 server returnsexit code 255 to ssh when app returns 0

2008-02-29 Thread Matt Johnston
On Fri, Feb 29, 2008 at 03:32:52PM -0600, Steven Hein wrote: Steven Hein wrote: Hello-- I have not seen any new information on this issue since the thread from last December: http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2007q4/000672.html Does anyone have any updates or

Dropbear 0.51 released

2008-03-27 Thread Matt Johnston
Hi all. I've put up version 0.51 of Dropbear, http://matt.ucc.asn.au/dropbear/dropbear.html as usual. There aren't many changes though it should fix the problems with an exit status not being returned by the server. Cheers, Matt 0.51 - Thu 27 March 2008 - Make a copy of password fields

Re: port forward bind address

2008-09-12 Thread Matt Johnston
On Thu, Sep 11, 2008 at 12:19:25PM +0200, Krafte wrote: On Thu, 11 Sep 2008 11:50:39 +0200, Krafte [EMAIL PROTECTED] wrote: Hi, is there a way to get dropbear tcp forwarding over the ip it is bind(-p) to? An example: The server has two ips 10.10.10.1 and 10.10.10.2 On the server I

Re: [PATCH] Allow coredumps

2008-10-28 Thread Matt Johnston
On Mon, Oct 27, 2008 at 08:46:51PM -0700, Brent Roman wrote: This is a patch to v0.51 that introduces a new configure time option ALLOW_COREDUMPS to allow coredumps from processes started via dropbear server (and client) It conditionally rolls back a change introduced around version 0.49

Re: show more details in failed attempts in the syslog

2008-10-28 Thread Matt Johnston
On Tue, Oct 28, 2008 at 06:06:16PM +0800, Ming-Ching Tiew wrote: I am wondering if it makes sense to put failed attempts to login into the syslog including the information like user and password ? Right now it only logs information that there is a failed attempt when there is invalid

Re: More than one remote port fwd request for the same local port

2008-10-30 Thread Matt Johnston
On Thu, Oct 30, 2008 at 02:37:44PM +0100, Michael Wiedmann wrote: Hi, how deals dropbear with different clients which are requesting each a remote port forwarding to the same local port (on the server side), e.g. system-1 dbclient -l user1 -N -R :client-ip-1:80 server-ip ...

Re: Remote Port Forwarding: local port on client

2008-11-03 Thread Matt Johnston
On Mon, Nov 03, 2008 at 07:52:14AM +0100, Michael Wiedmann wrote: Hi, am I correct, that the local port used on the client ('YY' in '-R :client-ip:YY') is not part of the SSH_MSG_GLOBAL_REQUEST packet (see http://www.faqs.org/rfcs/rfc4254.html, 7.1. Requesting Port Forwarding)? I'd

Re: How to setup SSH tunneling in dropbear?

2008-11-04 Thread Matt Johnston
On Tue, Oct 28, 2008 at 01:43:05PM +0800, Noor Maszuari wrote: Hi, I'm newbie in dropbear and I would like to know how to setup SSH tunneling using dropbear? What sort of tunnelling do you want to use? You probably would do something like: dbclient -i /path/to/dropbear.key -L

Dropbear 0.52

2008-11-12 Thread Matt Johnston
Hi all. I've put together a release for Dropbear 0.52. It mostly has new features, as well as a few bugfixes. The client has gained a few new additions including the ability to onion-route through a few SSH servers, all established from the local host. Performance connecting to an OpenSSH server

Re: SecureCRT - SSH-2.0-dropbear_0.36

2008-11-12 Thread Matt Johnston
On Tue, Nov 11, 2008 at 06:56:49PM +0100, Roman Medina-Heigl Hernandez wrote: Putty exposes similar behaviour. Summary: 2008-11-11 18:51:30 Looking up host 192.168.0.230 2008-11-11 18:51:30 Connecting to 192.168.0.230 port 22 2008-11-11 18:51:30 Server version: SSH-2.0-dropbear_0.36

Re: dbclient - read from standard input

2008-12-16 Thread Matt Johnston
On Sun, Dec 14, 2008 at 01:30:12PM +0200, Hai Zaar wrote: Good day! Why does dbclient reads data from tty and not from standard input? For example, OpenSSH reads password from tty and data from standard input, enabling piping command's stdout to remove host via ssh, like this: $ echo asdf |

Re: Patch to speed-up LibTomMath

2008-12-18 Thread Matt Johnston
On Wed, Dec 17, 2008 at 11:20:07PM +0100, bodr...@mail.dm.unipi.it wrote: I patched the 3-way Toom from libtommath with some simple optimizations ( http://ln.bodrato.it/FasterToomConvolution_pdf ), now it is significantly faster: on my laptop it obsoletes the Karatsuba code, since it is as

Re: disable SSH_MSG_USERAUTH_BANNER ?

2009-01-02 Thread Matt Johnston
On Fri, Jan 02, 2009 at 12:02:18PM -0800, sarta53 wrote: I have dropbear sshd v0.51 running on a linksys router loaded with dd-wrt firmware. Is there a way to disable sshd from sending the login banner (SSH_MSG_USERAUTH_BANNER) to ssh clients? (which requires them to manually click ok on

Re: [OT] recommendations for graphical windows clients for SCP to dropbear?

2009-01-08 Thread Matt Johnston
On Thu, 8 Jan 2009 20:47:43 +0100, Hans J. Koch h...@linutronix.de wrote: On Thu, Jan 08, 2009 at 02:38:02PM -0500, Robert P. J. Day wrote: i am most emphatically *not* a windows person, but a co-worker wants to set up some kind of graphical (windows XP) client to SCP files to an embedded

Re: dropbear gatewayports ?\!

2009-01-19 Thread Matt Johnston
On Sat, Jan 17, 2009 at 11:18:00AM -0500, card sharing wrote: I read something about setting the gatewayports and that dropbear -a would probably fix this but i can't make it work... Where do i set gatewayports for dropbear in ubuntu or how do i make my serwer public ?! You should be

Re: Allow password-less ( key-less) login via dropbear

2009-04-02 Thread Matt Johnston
On Thu, Mar 26, 2009 at 02:05:02AM -0400, Paul Smith wrote: In openssh I can do this by setting the SSH daemon parameter to not fail on empty passwords. But, I can't find anything similar in dropbear. Googling around I found references to a allow-nopw.patch which supposedly adds this but I

Re: ### Dropbear MMAP problem?

2009-07-08 Thread Matt Johnston
I'm pretty sure there are some problems running Dropbear standalone, since that part isn't really vfork safe. Could you try running from an inetd (give it -i argument) and see if that works? Matt On Tue, Jul 07, 2009 at 02:12:53PM -0400, Steve Spano wrote: Hello, I am attempting to get

Re: escape sequence support in dropbear?

2009-08-05 Thread Matt Johnston
On Wed, Aug 05, 2009 at 07:47:44AM -0500, Steven Hein wrote: Just wondering if anyone has pondered adding escape sequence support to dropbear? (I'm not looking for a full set of escape sequences like openssh has, just the ~. support to drop the connection). or more directlyif

Re: Issue with PAM enabled dropbear !!

2009-09-29 Thread Matt Johnston
On Fri, Sep 25, 2009 at 07:16:13PM -0700, Vishnu Govardhana wrote: Hi Gurus, I am a newbie to dropbear. I compiled 0.48.1 version with --enable-pam. Now after installing it, my connection from a remote system is failing due to 'Bad packet length' (the number varies everytime). I tried to

Re: scp in dropbearmulti?

2009-09-30 Thread Matt Johnston
On Thu, Oct 01, 2009 at 12:34:30AM -0500, Rob Landley wrote: On Wednesday 30 September 2009 22:46:17 Mike Frysinger wrote: dbscp is already in the multi build Really? ... Where? ... Because I'm not finding it in the output of ./configure make -j 2 MULTI=1 It's not in the list by

Re: scp in dropbearmulti?

2009-10-02 Thread Matt Johnston
On Thu, Oct 01, 2009 at 02:11:13AM -0400, Mike Frysinger wrote: On Thursday 01 October 2009 01:37:52 Matt Johnston wrote: make -j 2 MULTI=1 PROGRAMS=dropbear dbclient dropbearkey dropbearconvert scp and it should work. I'll make the docs a bit clearer. how would you feel about

Re: FTP tunneling query

2009-10-07 Thread Matt Johnston
Hi, Dropbear doesn't know anything particular about FTP. I suspect that forwarding FTP through dropbear (or any other SSH server) won't work very well, given they dynamic port allocation. Perhaps OpenSSH client with socks forwarding might work? Cheers, Matt On Wed, Oct 07, 2009 at 06:05:08PM

Re: How to integrate dropbear with CLISH?

2009-10-07 Thread Matt Johnston
Hi, There isn't anything in options.h, though you could edit bits of svr-chansession.c to achieve what you want. Alternatively you could change the shell in /etc/passwd (depending how the system is set up). Cheers, Matt On Mon, Oct 05, 2009 at 03:49:09PM -0500, Kavita Raghunathan wrote: Hi,

Re: Detect dropped connections

2010-07-21 Thread Matt Johnston
Hi, Apologies to everyone for the long delay in replying. On Wed, Jul 07, 2010 at 10:42:11AM +0100, Dan O'Donovan wrote: You're correct that the -K option should prevent the server and the routers in between from closing the connection. I tried using the -I option in the same way that you did

Re: Detect dropped connections

2010-07-21 Thread Matt Johnston
On Wed, Jul 21, 2010 at 01:47:10PM +, Johan Ribenfors wrote: This compiled and ran fine - but didn't solve the problem. The server (OpenSSH) would still drop the occasional connection and dropbear wouldn't notice. I might be using it incorrectly, (I hope I am) but don't think so. Just

Re: Detect dropped connections

2010-07-22 Thread Matt Johnston
On Thu, Jul 22, 2010 at 02:46:38PM +, Johan Ribenfors wrote: Matt Johnston matt at ucc.asn.au writes: This looks sensible (exiting if a -R forward fails when -N is specified). I wonder if anyone would have problems if they're using -N and multiple -L/-R options and don't mind

Re: How to redirect the output of an command executed with dbclient on a remote server?

2010-07-23 Thread Matt Johnston
What commandline are you running? If it works by hand but not from a script then that suggests that it might be that the program needs a TTY to run properly - you could try running dbclient -t in the cronjob? Testing here redirecting output seems to work as below (the shell is zsh). I've added -T

Re: dbclient - banner too long?

2010-08-24 Thread Matt Johnston
On Tue, Aug 24, 2010 at 07:11:47PM +0800, Matt Johnston wrote: On this particular host, I do not have access to change the banner. However on a different machine that I do have access to, I did change its banner and confirmed that indeed when using the longer one, dbclient gives

Re: Dropbear source repository

2010-10-12 Thread Matt Johnston
On Tue, Oct 12, 2010 at 02:28:48AM -0700, Robert Ransom wrote: Where is the current Dropbear development source repository? Ah, the web interface had stopped updating, I've fixed that now. http://viewmtn.angrygoats.net/all/branch/changes/au.asn.ucc.matt.dropbear is the URL or you can pull

Dropbear 0.53

2011-02-24 Thread Matt Johnston
Hi all, After much too long a delay Dropbear 0.53 is now released. Tarballs are located at http://matt.ucc.asn.au/dropbear/ as usual, changes are as listed below. Cheers, Matt 0.53 - Thurs 24 February 2011 - Various performance/memory use improvements - Client agent forwarding now works,

Re: Dropbear 0.53

2011-02-25 Thread Matt Johnston
On Fri, Feb 25, 2011 at 12:13:24AM -0600, Rob Landley wrote: On 02/24/2011 08:37 AM, Matt Johnston wrote: Hi all, After much too long a delay Dropbear 0.53 is now released. Tarballs are located at http://matt.ucc.asn.au/dropbear/ as usual, changes are as listed below. You broke

Re: 45s login delay

2011-03-17 Thread Matt Johnston
On Wed, Mar 16, 2011 at 07:16:34PM -0500, Rob Landley wrote: On 03/16/2011 02:25 AM, Peter Turczak wrote: Hi Magnus, hi Rob, a while ago I made the same observations you did. On an m68k-nommu with 166 MHz the RSA exchange took quite forever. After some profiling I found out the comba

Re: Connection to dropbear server disconnects with Bad Packet Length

2011-05-12 Thread Matt Johnston
On Tue, May 10, 2011 at 08:58:33AM -0700, Sam Gandhi wrote: I am running dropbear 0.53 on my server, when I connect to this machine, when my connection closes, due to inactivity, I see following message: Bad packet length 1128090262. Disconnecting: Packet corrupt Hi, Is the server running

Re: Connection to dropbear server disconnects with Bad Packet Length

2011-05-15 Thread Matt Johnston
On Fri, May 13, 2011 at 10:27:51AM -0700, Sam Gandhi wrote: What does a tcpdump or wireshark capture look like? After the first few packets there should be nothing intelligible in the byte stream (it's all encrypted). I have attached wireshark capture -- at least -- I cant see anything

Re: dropbear and -lcrypt

2011-06-30 Thread Matt Johnston
On Sun, Jun 26, 2011 at 07:42:23PM -0500, Rob Landley wrote: The 0.53 release of dropbear had -lcrypt symbols referenced in .o or .a files _after_ libcrypt on the link command line. Thus they were unresolved, and the link failed. I reported this here, and in response matt moved -lcrypt to

Re: dropbear and -lcrypt

2011-06-30 Thread Matt Johnston
On Thu, Jun 30, 2011 at 10:43:10PM +0800, Matt Johnston wrote: Yes, that was a bit unfortunate. I've attached a patch that Here's the patch, missed it. Matt # # old_revision [c7f6c45c46a2f8e2394756c68ae825d6e4dc7489] # # patch Makefile.in # from [ea21753734b01f01ea1062923f4cb5eac65eadec

Re: [0.51] Can I remove dbclient?

2011-07-18 Thread Matt Johnston
Hi, I don't know what your appliance's manufacturer has done, what device it? I would think you can probably create the symlink, though it'd depend how things were built. Matt On Mon, Jul 18, 2011 at 04:02:33PM +0200, Gilles wrote: Hello On an appliance, I noticed that dblclient and

Re: Compression when using dropbear as an ssh/scp client ?

2011-09-07 Thread Matt Johnston
Dropbear client always uses compression if possible, when it is compiled in. The -C argument is ignored. Cheers, Matt On Mon, Sep 05, 2011 at 03:46:59PM +0200, Guillaume Dargaud wrote: Hello all, I'm using dropbear compiled from buildroot: $ grep DROP .config .config:BR2_PACKAGE_DROPBEAR=y

Re: [PATCH] Set TOS (TCLASS) bits under ipv6

2011-09-28 Thread Matt Johnston
Hi, Thanks for the patch, it answers my commented question six years later :) What are the implications of stomping on the ECN bit on pre-2.6.39 kernels? I agree flags for SCP would make sense, I'll take a look where to do that. I'm not sure how to handle SFTP since lookup commands should remain

Re: Query regarding dropbear

2012-01-10 Thread Matt Johnston
That should work in 2011.54 Cheers, Matt On Tue, Jan 10, 2012 at 04:51:25PM +0530, Chandan Tiwari wrote: Hi I've installed dropbear 0.53.1 on my linux machine and I tried to request for remote port forwarding by assigning the port to listen as 0 using the command : dbclient

Dropbear 2012.55 security release

2012-02-24 Thread Matt Johnston
Hi all, Dropbear 2012.55 is now released, available as usual at https://matt.ucc.asn.au/dropbear/dropbear.html This fixes a security bug that could potentially allow arbitrary code execution as root to a user authenticating using an authorized_keys file with a command=... restriction. Cheers,

Re: dropbear scp server rejecting client with Name or service not known

2012-04-07 Thread Matt Johnston
Hi, There isn't any scp specific code, so I think something else must be going wrong. Does running ssh tsct hostname work? (scp gets run as a command argument like that). Could it be that 0.55 was compiled against a different libc that has dependencies on libnss* or something? To me it looks as

Re: dropbear scp server rejecting client with Name or service not known

2012-04-12 Thread Matt Johnston
: fd 1 clearing O_NONBLOCK 0.50: Transferred: sent 5240, received 1208 bytes, in 0.0 seconds 0.50: Bytes per second: sent 225133.4, received 51901.0 0.50: debug1: Exit status -1 On Sunday, April 08, 2012 00:48:37 Matt Johnston wrote: Hi, There isn't any scp specific code, so I think

Re: dropbear still requires password when password is blank

2012-04-26 Thread Matt Johnston
Hi, When I ssh to the openssh server using an account with an empty password, I see that that the auth method none succeeds. When I ssh to the dropbear server, it ends up using auth method password with an empty password. Can somebody lend me a clue as to what I need to do to make dropbear

Re: dropbear still requires password when password is blank

2012-05-09 Thread Matt Johnston
Hi, Somehow I missed this patch and also a similar one from Chris Metcalf in 2010 :( Sorry about that. Anyway, I've now committed the same functionality for the next release (in Mercurial now). Cheers, Matt On Thu, Apr 26, 2012 at 11:54:28AM -0400, Paul Smith wrote: On Thu, 2012-04-26 at

Re: Dropbear and PAM auth.

2012-05-31 Thread Matt Johnston
It should work ok with any module that just prompts for a username and password, which gets mapped to SSH's password authentication mode. It doesn't support more complex challenge/response type modes (which would use SSH's keyboard-interactive mode IIRC). If the username/password prompt doesn't

Re: Dropbear and libtommath

2012-05-31 Thread Matt Johnston
I made a start on this in a mercurial branch (on the public server) but got sidetracked trying to get tomsfastmath working on MacOS. I can't remember what state it's in, though I think the dropbear code changes are done but untested. The tomsfastmath directory mightn't be in a good state

Re: Passphrase keys?

2012-07-01 Thread Matt Johnston
Hi, Currently keys can't be encrypted. It would probably be worth adding - I guess just supporting OpenSSH format would be most convenient (and also for non-encrypted keys, though I think they have a different format). You can use OpenSSH's ssh-agent with Dropbear as an alternative to encrypted

Re: forwarding problems

2012-07-23 Thread Matt Johnston
Matt Johnston m...@ucc.asn.au: Hi, Dropbear already does SO_REUSEADDR for all listening sockets, see https://secure.ucc.asn.au/hg/dropbear/file/983a817f8e41/dbutil.c#l254 Can you run strace on dbclient to see what's failing? Does the server log anything? Cheers, Matt On Mon, Jul 23

Re: forwarding problems

2012-07-23 Thread Matt Johnston
data or a TCP keepalive is transferred (I think). Matt Maris, Rob maris@ingenieur.de wrote: Am 23.07.2012, 17:16 Uhr, schrieb Matt Johnston m...@ucc.asn.au: Ah right. Is the server-side sshd/dropbear process still running? I guess something hasn't noticed that the client has gone away

Re: Dropbear calling my own command-line parser than /bin/sh

2012-09-26 Thread Matt Johnston
username at all. How could I achieve that ?? SSH client: Login as: press enter -- shouldn't prompt at all username:xxx(CLI auth) password:xxx(CLI auth) Reddy On Tue, Sep 25, 2012 at 8:49 PM, Matt Johnston m...@ucc.asn.au wrote: Hi, Take a look at https://secure.ucc.asn.au/hg

Re: Support to port number in known hosts

2012-11-11 Thread Matt Johnston
Hi, That's a good idea. I actually thought Dropbear was already doing it, I meant to add it a long time ago. I'll try and get it done in the next release. Cheers, Matt On Thu, Nov 08, 2012 at 07:17:59AM -0300, Salatiel Filho wrote: Would it be possible to add support to port numbers in

Re: [PATCH] IPv6 bracket notation for listen addresses in -p

2012-12-14 Thread Matt Johnston
Hi, Thanks for that, I'll make sure it makes the next release. Cheers, Matt On Tue, Dec 11, 2012 at 12:11:45AM -0500, Ben Jencks wrote: Updates parsing of the -p option to handle [2001:dba::]:22 style IPv6 addresses. This allows binding to specific IPv6 addresses, rather than having to bind

Re: Issues after Update from 0.52 to 2012.55; login time; password auth

2013-01-03 Thread Matt Johnston
Hi, 7 seconds seems slow. Where said that it's a common problem? I get around 1 second to SSH to a raspberry pi (700mhz ARMv6). Was it built with the same compiler and compile options? Leaving optimisation off could make that difference. I can't see how it wouldn't ask for a password unless

Re: RFC: PATCH: Allow configuring allow blank password option at runtime

2013-02-22 Thread Matt Johnston
Hi Paul, Thanks for that, I've committed it for the next release. Cheers, Matt On Wed, Feb 20, 2013 at 04:51:14PM +, Paul Eggleton wrote: Hi there, Attached is a patch we've developed for dropbear within the Yocto Project to avoid the need to rebuild dropbear when we wish to disable

Re: Problem with Dropbear/dbclient as SFTP client

2013-03-01 Thread Matt Johnston
Hi, Dropbear doesn't have its own sftp client, but you can use it with the OpenSSH sftp client: sftp -S dbclient user@host Cheers, Matt On Thu, Feb 28, 2013 at 05:39:27PM +0100, Alexis-externe DAVOUX wrote: Hi, I have some trouble with dropbear used as SFTP client. I've set up a SFTP

Re: Problem with Dropbear/dbclient as SFTP client

2013-03-02 Thread Matt Johnston
On Fri, Mar 01, 2013 at 02:47:05PM +0100, Alexis-externe DAVOUX wrote: Hi Matt, Thanks for your quick answer. If I understand correctly, the dbclient establishes the underlying SSH connection with the SFTP server, but does not implement a whole SFTP client. So I have to use a separate

Dropbear 2013.56 released

2013-03-21 Thread Matt Johnston
Hi all, Dropbear 2013.56 is now released, with a mix of features and bug fixes. Download as usual at https://matt.ucc.asn.au/dropbear/dropbear.html I've also set up a github mirror of the Dropbear mercurial repository at https://github.com/mkj/dropbear . It'll be read-only but might be of use to

Re: Dropbear 2013.56 released

2013-03-21 Thread Matt Johnston
Hg-Git, http://hg-git.github.com/ Matt Rob Landley r...@landley.net wrote: On 03/21/2013 10:40:46 AM, Matt Johnston wrote: Hi all, Dropbear 2013.56 is now released, with a mix of features and bug fixes. Download as usual at https://matt.ucc.asn.au/dropbear/dropbear.html I've also set

Re: Timeout dead connections

2013-03-27 Thread Matt Johnston
Hi, At the very least if there is traffic on the connection (which -K will ensure) then TCP should timeout and the connection should eventually (a minute or so?) close. Can you get a packet capture with tcpdump? Cheers, Matt On Wed, Mar 27, 2013 at 04:24:27PM +0100, Mattias Walström wrote:

Re: Timeout dead connections

2013-03-27 Thread Matt Johnston
I thought those were fixed in 0.53 or perhaps 2011.54: 2011.54 - Tuesday 8 November 2011 - Fixed case where -K 1 keepalive for dbclient would cause a SSH_MSG_IGNORE packet to be sent 0.53 - Thurs 24 February 2011 - Make -K (keepalive) and -I (idle timeout) work together sensibly in the client.

Re: Timeout dead connections

2013-03-28 Thread Matt Johnston
I think that -K on the server should be enough. On the server can you run tcpdump -i eth0 -w cap1.cap port 22, get a ssh session going, pull out the cable, wait 10 minutes, then send me the capture? Could you also check that the Dropbear process for the connection is still running after the

Re: scp issue in 0.56

2013-03-31 Thread Matt Johnston
Hi, Thanks for pointing that out, I'll fix it in the next release. Cheers, Matt On Thu, Mar 28, 2013 at 05:51:58PM +0100, Frank Van Uffelen wrote: Hello, I think I've found a problem in the scp implementation in 0.56: lines 233-235 of scp.c say: #ifdef USE_VFORK

Re: Timeout dead connections

2013-04-01 Thread Matt Johnston
Hi, The attached attached patch against 2013.56 should fix it, or https://secure.ucc.asn.au/hg/dropbear/rev/70811267715c Dropbear wasn't running cleanup handlers when it exited due to the TCP connection being closed. Matt On Thu, Mar 28, 2013 at 07:24:55PM +0800, Matt Johnston wrote: I think

Re: Timeout dead connections

2013-04-01 Thread Matt Johnston
And the patch actually attached here. On Mon, Apr 01, 2013 at 11:01:42PM +0800, Matt Johnston wrote: Hi, The attached attached patch against 2013.56 should fix it, or https://secure.ucc.asn.au/hg/dropbear/rev/70811267715c Dropbear wasn't running cleanup handlers when it exited due

Re: segfault RH EL5 /dev/urandom read-only

2013-04-02 Thread Matt Johnston
That's a bit unfortunate, I've fixed it in https://secure.ucc.asn.au/hg/dropbear/rev/73b6e5d8801b Cheers, Matt Scott Case sc...@vccs.edu wrote: I just built the 2013.56 release and am receiving segfaults on startup. The offending line is the fwrite() in random.c in write_urandom(). Our RHEL 5

Re: Timeout dead connections

2013-04-05 Thread Matt Johnston
should have forgotten the connection. Mattias On 2013-04-01 17:01, Matt Johnston wrote: Hi, The attached attached patch against 2013.56 should fix it, or https://secure.ucc.asn.au/hg/dropbear/rev/70811267715c Dropbear wasn't running cleanup handlers when it exited due to the TCP connection

Dropbear 2013.57 released

2013-04-15 Thread Matt Johnston
Hi all, I've put up Dropbear 2013.57 as usual at https://matt.ucc.asn.au/dropbear/dropbear.html As well as a few bug fixes it has significant improvements to the number of round trips required to set up a connection - useful for high latency links. Cheers, Matt 2013.57 - Monday 15 April 2013

Re: embedded dropbear...

2013-04-16 Thread Matt Johnston
Hi, I'm pretty sure there'd be interest in such a port, even if there are no immediate takers. I guess it depends how much effort you want to put in - a separate tarball (or hg branch ease of merging future versions) might be enough for other people to get going. It doesn't sound like the changes

Re: Compile errors on 2013.57

2013-04-16 Thread Matt Johnston
Sorry about that. The patch is correct, I'll put up a new release in a couple of days (wait to see if there are any more glaring bugs). Cheers, Matt On Tue, Apr 16, 2013 at 11:13:48PM +0200, Hans Harder wrote: I get compile errors with the new version, because I compile this in a uclib

Re: Patch multihop scp with different ports

2013-04-17 Thread Matt Johnston
I've applied this with % as the delimiter instead, since # breaks some shells (eg echo echo thing#blah | csh ) Cheers, Matt On Wed, Apr 17, 2013 at 02:23:52PM +0200, Hans Harder wrote: I had some problems with the multihop for scp using different portnumbers. The original syntax uses / as

Dropbear 2013.58 released

2013-04-18 Thread Matt Johnston
Hi all, I've put up a new release 2013.58 that fixes building 2013.57 without zlib, and a couple of other things thanks to Hans Harder. As usual https://matt.ucc.asn.au/dropbear/dropbear.html Cheers, Matt 2013.58 - Thursday 18 April 2013 - Fix building with Zlib disabled, thanks to Hans

Re: howto: send the X commands to the X server on your host.

2013-04-19 Thread Matt Johnston
jn Fri, Apr 19, 2013 at 09:20:27AM +0100, Jonathan Chetwynd wrote: does dbclient take a command similar to -X in ssh? to send the X commands to the X server on your host. if not is there a workaround or plans to implement? Not easily. If the X server is listening on TCP (port 6000) you

Re: About DEFAULT_PATH and _PATH_SSH_PROGRAM variables

2013-04-19 Thread Matt Johnston
The options.h file is intended to be edited for configuration. I'll add those #ifndefs too though - it should probably happen for all of the things in options.h Cheers, Matt On Fri, Apr 19, 2013 at 04:24:47PM +0800, Yuan-Yi Chang wrote: Hi, I'm new to Embedded System World. There are some

Re: [PATCH] Notify clients of PAM error messages

2013-05-13 Thread Matt Johnston
Hi, Thanks for the patch. It looks useful, though I plan to update Dropbear to full PAM handling (with keyboard-interactive mode) soon, which should handle this case as well. If I don't get that done I'll put the patch in the next release. My one concern is how clients might deal with multiple

Re: Google Authenticator

2013-05-20 Thread Matt Johnston
Hi, Even if it's built with PAM I'm not sure it'll work. Dropbear's PAM handling is fairly rudimentary, it can only handle conversations that just ask for username, password. Adding more sophisticated handling probably requires recursively running the Dropbear session main loop from within

Re: slow logins -- some data for comparison

2013-05-25 Thread Matt Johnston
Hi, I think the solution is to use tomsfastmath instead. There was a patched version posted a while ago on this list. Eventually I'd like to have Dropbear able to build against either tomsfastmath (for speed) or libtommath (for portability) using the ltc_mp mechanism in libtomcrypt. There's

Re: slow logins -- some data for comparison

2013-05-25 Thread Matt Johnston
to attempt to add support for tomsfastmath, using ltc_mp as you described, which version of dropbear should I start from? And where should I obtain the tomsfastmath library? Thank you, William On Sat, May 25, 2013 at 3:41 AM, Matt Johnston m...@ucc.asn.au wrote: Hi, I think

Re: slow logins -- some data for comparison

2013-06-01 Thread Matt Johnston
to dropbox for fast math, let me know and I will send them or put them online. The changes are pretty clean -- just a couple of things as mentioned previously. Suggestions welcome! William On Sat, May 25, 2013 at 10:19 AM, Matt Johnston m...@ucc.asn.au wrote: I'd start from 2013.58

Re: dbclient half-close?

2013-07-26 Thread Matt Johnston
Hi Catalin, Thanks for looking at that - the last patch looks sensible, I'll give it a good test. There are a lot of subtle scenarios in channel closing (and variations between OSes). Cheers, Matt Catalin Patulea c...@vv.carleton.ca wrote: Hm, that broke channel-close-by-child-exit. One more

  1   2   3   >