I certainly won't grep user configuration files from package maintainer
scripts - that sort of thing causes serious problems in some
environments, particularly those with lots of users or home directories
mounted over NFS.

There's something to be said for doing a better job of the error message
in this case (e.g. pointing people to the openssh-client-ssh1 package),
although I'm wary of ending up maintaining yet another long-lived and
necessarily-Debian-specific patch.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1574415

Title:
  [16.04] ssh <host>: Bad protocol spec '1'

Status in openssh package in Ubuntu:
  Confirmed

Bug description:
  After upgrade to 16.04 ssh client will not connect to any host,
  reporting

  /home/tj/.ssh/config line 109: Bad protocol spec '1'.

  The entry is:

  Host ups-01
  Hostname 10.254.0.1
  User hostmaster
  IdentityFile ~/.ssh/id_hostmaster
  IdentitiesOnly yes
  Protocol 1

  If this were an entry in /etc/ssh/ssh_config and the user had no
  privileges to edit that file it could create a denial of service to
  the ssh client (if the user doesn't know how to over-ride the config).

  It would be helpful if the openssh-client postinst script were to grep
  the standard config files (including for users) and add a warning to
  the motd and syslog if any invalidated configuration statements are
  found.

  This will especially affect connections to embedded devices - in this
  case it is an ssh server on a management VLAN in one of several
  network-attached Uninterruptable Power Supplies that cannot be
  upgraded, and only support Protocol 1.

  According to the 16.04 Release Notes protocol 1 requires the openssh-
  client-ssh1 package with the ssh1 binary.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1574415/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to