Professional Web Applications Themes

OpenSSH - CSSA-2003-SCO.24 - SCO

After installing CSSA-2003-SCO.24, I am getting the following error:   Then the login session is closed. This happens when anyone other than root attempts to login via ssh. telnet is not affected. Does anyone have any ideas?...

  1. #1

    Default OpenSSH - CSSA-2003-SCO.24

    After installing CSSA-2003-SCO.24, I am getting the following error:
     

    Then the login session is closed. This happens when anyone other than
    root attempts to login via ssh. telnet is not affected.

    Does anyone have any ideas?
    David Guest

  2. #2

    Default Re: OpenSSH - CSSA-2003-SCO.24

    "David Rosenberger" <com> wrote in message
    news:com... [/ref]
    representative. 

    Same problem. Had only tested after installation with root access via PuTTy,
    as only need sporadic off-site access.

    Identical behavior occurs with PuTTY v 0.53b and Cygwin ssh
    client(OpenSSH_3.7.1p2).

    Software Manager verifies the new OpenSSH package without any file
    discrepencies.

    I haven't tried uninstalling and trying to build the OpenSSH package from
    the OpenSSh web site yet. Has anyone done that, and does the same problem
    occur?

    David P. Lurie


    David Guest

  3. #3

    Default Re: OpenSSH - CSSA-2003-SCO.24

    David P. Lurie typed (on Wed, Oct 08, 2003 at 04:35:25PM +0000):
    | "David Rosenberger" <com> wrote in
    | message news:com...
    | > After installing CSSA-2003-SCO.24, I am getting the following error:
    | >
    | > > The status from the Policy Management Daemon (/etc/sco_pmd)
    | > > indicates that a serious error condition has occurred. Login
    | > > is allowed on the override device, and the system administrator
    | > > is strongly advised to consult the SCO online Support Solutions
    | > > Library (SSL) for assistance. If the SSL is inaccessible, please
    | > > contact your SCO Support representative.
    | >
    | > Then the login session is closed. This happens when anyone other
    | > than root attempts to login via ssh. telnet is not affected.
    | >
    | > Does anyone have any ideas?
    |
    | Same problem. Had only tested after installation with root access via
    | PuTTy, as only need sporadic off-site access.
    |
    | Identical behavior occurs with PuTTY v 0.53b and Cygwin ssh
    | client(OpenSSH_3.7.1p2).
    |
    | Software Manager verifies the new OpenSSH package without any file
    | discrepencies.
    |
    | I haven't tried uninstalling and trying to build the OpenSSH package
    | from the OpenSSh web site yet. Has anyone done that, and does the same
    | problem occur?

    Which rock have you been hiding under? I've posted quite a bit about my
    build of OpenSSH in the last fortnight.

    My OSR 5 SSH (at ftp.jpr.com) packages are built from the same OpenSSH
    source as CSSA-2003-SCO.24, but uses a more recent OpenSSL source tree
    than does CSSA-2003-SCO.24.

    Neither on OSR 5.0.5, 5.0.6, or 5.07 do my binaries show any error like
    the one cited, whether accessed by a Unix ssh client or the ones in Anzio
    v. 15.

    --
    JP
    Jean-Pierre Guest

  4. #4

    Default Re: OpenSSH - CSSA-2003-SCO.24

    I tried all morning (10/8) to get to JPR's ftp site to no avail. Was
    it down? Is it mirrored?
    george.bush@visto.com Guest

  5. #5

    Default Re: OpenSSH - CSSA-2003-SCO.24

    com typed (on Wed, Oct 08, 2003 at 04:49:05PM -0500):

    | I tried all morning (10/8) to get to JPR's ftp site to no
    | avail. Was it down? Is it mirrored?

    When you post to this newsgroup, please don't give us
    useless summaries like "tried ... to no avail". Post the
    exact command you used, and what then appeared on your
    screen.

    I say that because many of us might think of using our
    crystal balls instead of guessing what you might have typed,
    but we can't, the Dept. of Homeland Security having disabled
    all U.S. crystal balls this year.

    OTOH, if my ftp server has political leanings that would
    preclude access by anyone whose name appears to be
    "george.bush", then I need to re-examine wu-ftpd source code
    carefully to eliminate any such perverse bias.

    Logged in on a foreign computer, I can perfectly well
    type 'ftp ftp.jpr.com' and bring up my own ftp server.
    Furthermore, /var/adm/xferlog shows ftp transfers succeeded
    from ftp.jpr.com at 2:26, 8:49, and 11:36 on Oct. 8.

    --
    JP
    Jean-Pierre Guest

  6. #6

    Default Re: OpenSSH - CSSA-2003-SCO.24

    I had actually downloaded both the OpenSSH source tarball and your
    openssh4osr507.tar.bz2 on 9/26.

    SCO had released the patch installable with Software Manager by the time
    that I was able to proceed.

    My interpretation of your README and RE-INSTALL is that installation of your
    patch over SCO's 3.7.1p2 patch should use the fresh installation approach.
    Is that correct?

    I found a slightly different copy of your patch file tonight on your FTP
    site, with a size of 869KB (10/1/03) vs 863KB (9/26/03). What is the
    difference? I was planning to ftp the new file to the server and try it.

    Thanks,

    David P. Lurie


    David Guest

  7. #7

    Default Re: OpenSSH - CSSA-2003-SCO.24

    David P. Lurie typed (on Wed, Oct 08, 2003 at 10:07:04PM -0400):
    | I had actually downloaded both the OpenSSH source tarball and your
    | openssh4osr507.tar.bz2 on 9/26.
    |
    | SCO had released the patch installable with Software Manager by the time
    | that I was able to proceed.
    |
    | My interpretation of your README and RE-INSTALL is that installation of your
    | patch over SCO's 3.7.1p2 patch should use the fresh installation approach.
    | Is that correct?

    My tarball installs everything in entirely different locations than
    the SCO paths. So you do not install my binaries "over" SCO's, but
    alongside them.

    | I found a slightly different copy of your patch file tonight on your FTP
    | site, with a size of 869KB (10/1/03) vs 863KB (9/26/03). What is the
    | difference? I was planning to ftp the new file to the server and try it.

    Gee, why should you only notice that today? When I created a newer
    version, I did mention it in this newsgroup.

    There was a change on Open SSL on 9/30. Use only the latest...

    --
    JP
    Jean-Pierre Guest

  8. #8

    Default Re: OpenSSH - CSSA-2003-SCO.24

    On Wed, Oct 08, 2003 at 10:07:04PM -0400, David P. Lurie wrote: 

    FYI, just came across this in the SCO CSSA-2003-SCO.24/README download
    where the vols out to be, dated last night:

    "There is a problem with this fix for certain configurations. We are
    working on a fix."

    --- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ---
    -Joe Chasan- Magnatech Business Systems, Inc.
    com Hicksville, NY - USA
    http://www.MagnatechOnline.com Tel.(516) 931-4444/Fax.(516) 931-1264
    Joe Guest

  9. #9

    Default Re: OpenSSH - CSSA-2003-SCO.24

    David Rosenberger <com> wrote in message news:<com>... 
    >
    > Then the login session is closed. This happens when anyone other than
    > root attempts to login via ssh. telnet is not affected.
    >
    > Does anyone have any ideas?[/ref]

    All,

    We have a bug in CSSA-2003-SCO.24. We are working to fix it and will
    re-release the security fix once the fix is implemented.

    Thanks for bring this to my attention.

    John
    John Guest

  10. #10

    Default Re: OpenSSH - CSSA-2003-SCO.24

    > Logged in on a foreign computer, I can perfectly well 

    Yup!! but you know the user ID and the access pwd.


    donais Guest

Similar Threads

  1. 5.2 and openSSH
    By pitr256 in forum AIX
    Replies: 2
    Last Post: February 3rd, 04:28 AM
  2. OpenSSH
    By Jean-Pierre in forum SCO
    Replies: 36
    Last Post: October 2nd, 03:46 PM
  3. telnet vs Openssh
    By willjay in forum SCO
    Replies: 7
    Last Post: September 4th, 03:22 AM
  4. openssh on aix4.2
    By samara in forum AIX
    Replies: 4
    Last Post: August 9th, 11:37 AM
  5. CSSA-2003-SCO.13, installing on 505
    By Stuart J. Browne in forum SCO
    Replies: 0
    Last Post: July 28th, 02:23 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139