Re: SSHD question

[Ben Russo <ben umialumni com>]

You need a line that says:

	Protocol 2,1

You will also need host keys for both protocols, 
my sshd_config shows:# HostKey for protocol version 1

	#HostKey /etc/ssh/ssh_host_key
	# HostKeys for protocol version 2
	#HostKey /etc/ssh/ssh_host_rsa_key
	#HostKey /etc/ssh/ssh_host_dsa_key

And the permissions on all the files listed above
have to be correct.

For me it works with:

	
	-rw-------    1 root     root         2449 Aug 14 00:08 sshd_config
-rw-r--r--    1 root     root         1137 Aug 14 00:08 ssh_config
-rw-------    1 root     root        88039 Aug 14 00:08 moduli
-rw-r--r--    1 root     root          319 Dec 23 18:10 ssh_host_key.pub
-rw-------    1 root     root          515 Dec 23 18:10 ssh_host_key
-rw-r--r--    1 root     root          210 Dec 23 18:10
ssh_host_rsa_key.pub
-rw-------    1 root     root          883 Dec 23 18:10 ssh_host_rsa_key
-rw-r--r--    1 root     root          590 Dec 23 18:10
ssh_host_dsa_key.pub
-rw-------    1 root     root          668 Dec 23 18:10 ssh_host_dsa_key


On Fri, 2003-01-03 at 14:25, Burke, Thomas G. wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> After the big wipeout, I've installed ssh2 from ssh.com...  I recall
> that ssh1 has some serious security issues with it, and that ssh1
> compatibility allows these bugs in, or some such.  What are the lines
> I need to put into the sshd2_config file to disallow a client to use
> ssh1?
> 
> Also, anyone have an init.d style script I could use for starting &
> stopping  the daemon?
> 
> 	Thanks,
> 		Tom
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Personal Privacy 6.5.3
> 
> iQA/AwUBPhXjbNPjBkUEZx5AEQJvkgCeN5+RQZHyaKY2qqYqZq9cvHii09UAoIUh
> uclxpXG0W+p4Zv+njScWhGXF
> =tEvR
> -----END PGP SIGNATURE-----
> 
>