Hi all.
So, on two different machines, one running RedHat Linux 6.2, the other
running SGI IRIX 6.5.x, I upgraded the ssh daemon from 2.0.13 to 2.3.0 from
SSH Communications. Immediately, I found that old ssh1 clients couldn't
connect to the new version. I have the lines:
Ssh1Compatibility yes
Sshd1Path "/usr/local/sbin/sshd1"
in my /etc/ssh2/sshd2_config file, and compatibility had been working fine
before. The sshd1 path is correct. The problem even occurs when using an
ssh1 client on the server. The error from ssh1 is:
$ ssh1 localhost
Bad remote protocol version identification: 'sshd: SSH Secure Shell 2.3.0
(non-commercial version) on i586-pc-linux-gnu
'
$
This error led me to try to just telnet to port 22, with the following
results:
$ telnet localhost 22
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
Escape character is '^]'.
sshd: SSH Secure Shell 2.3.0 (non-commercial version) on i586-pc-linux-gnu
SSH-1.99-2.3.0 SSH Secure Shell (non-commercial)
Connection closed by foreign host.
$
I'm running sshd from inetd, with the following line in /etc/inetd.conf:
ssh stream tcp nowait root /usr/local/sbin/sshd sshd -i
As part of troubleshooting this problem, I turned off ssh from inetd and ran
the daemon standalone. I found that ssh1 compatibility works fine with the
standalone daemon. For comparison, the result of a telnet to port 22 with
the standalone daemon is:
$ telnet localhost 22
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
Escape character is '^]'.
SSH-1.99-2.3.0 SSH Secure Shell (non-commercial)
Connection closed by foreign host.
$
So, the upshot of this all is that sshd 2.3.0 spits out an extraneous line
when run from inetd. When I start the daemon standalone, I get that line on
the terminal at startup:
# /etc/rc.d/init.d/sshd2 start
Starting sshd2 on port 22: sshd2: SSH Secure Shell 2.3.0 (non-commercial
version) on i586-pc-linux-gnu
done.
#
To me, this seems like a bug in sshd 2.3.0, but I haven't heard of any other
reports of problems with ssh1 compatibility from inetd. Anyone have any
thoughts on the subject??
----------------------------------------
Ryan Curtis - [EMAIL PROTECTED]
