[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

"stable" ssh1 client connecting to sshd in "testing" (SOLVED) -was- Re: upgrading just one "stable" package to "testing" version




On Monday, March 18, 2002, at 09:11 PM, Toby Thain wrote:


On Monday, March 18, 2002, at 01:41 AM, J.H.M. Dassen (Ray) wrote:

On Sun, Mar 17, 2002 at 11:03:51 +1100, Toby Thain wrote:
I've just upgraded one Debian 2.2 machine from stable to testing and other 2.2 stable machines can't ssh into it ("Disconnecting: Bad packet length
1349676916").

The SSH in stable only supports version 1 of the SSH protocol; if you
configure your "testing" machine to accept that older version of the
protocol (by putting "Protocol 2,1" in /etc/ssh/sshd_config and restarting
ssh), SSH-ing from your stable machines works.

The solution to my problem (Debian 2.2 ssh1 client not being able to connect to Debian 3.0 sshd) involved several changes to /etc/ssh/sshd_config: - firstly the Protocol line as mentioned above (I think this was OK as distributed in "testing") - a line "HostKey /etc/ssh/ssh_host_key" needed to be added (after the two other HostKey lines for ssh2) - I also regenerated the ssh1 host keys (ssh-keygen -t rsa1 -N "" -f /etc/ssh/ssh_host_key). Not forgetting killall -HUP sshd (dangerous to do remotely, I guess, in case the daemon doesn't come back up?)

Then my ssh1 client (in Debian 2.2 stable) was able to connect.

Thanks everyone for your suggestions, although futzing with apt-get was getting me nowhere.

Toby


This didn't work for me (first thing I tried).


So I'd like to upgrade ssh on the client machine to the "testing" version. But I don't know how to do this other than adding "testing" to the apt-get sources, dselect upgrade, etc., which will upgrade everything. Can anyone
explain to me how to be more selective?

You'll need testing's apt (plus its depencencies) for that. The following
should work (though I'm not aware of people actually using this
configuration as most simply fully upgrade to testing, so you may want to use the "-s" flag to apt-get to see what it intends to do before actually
doing these steps):
- add "testing" entries to /etc/apt/sources.list in addition to the entries
  for "stable"
- "apt-get update"
- "apt-get install apt"
- create an /etc/apt/preferences with contents
	Package: *
	Pin: release a=stable
  to have apt default to the stable versions
- install testing's ssh by requesting it explicitly:
  "apt-get -t testing install ssh"

This didn't work for me either:

spaz:~# apt-get update
Hit http://non-us.debian.org testing/non-US/main Packages
Hit http://non-us.debian.org testing/non-US/main Release
Hit http://non-us.debian.org testing/non-US/contrib Packages
Hit http://non-us.debian.org testing/non-US/non-free Packages
Hit http://non-us.debian.org testing/non-US/non-free Release
Hit http://non-us.debian.org stable/non-US/main Sources
Hit http://non-us.debian.org stable/non-US/main Release
Hit http://non-us.debian.org stable/non-US/contrib Sources
Hit http://non-us.debian.org stable/non-US/contrib Release
Hit http://non-us.debian.org stable/non-US/non-free Sources
Hit http://non-us.debian.org stable/non-US/non-free Release
Reading Package Lists... Done
Building Dependency Tree... Done
spaz:~# apt-get install apt
Reading Package Lists... Done
Building Dependency Tree... Done
Sorry, apt is already the newest version
0 packages upgraded, 0 newly installed, 0 to remove and 5 not upgraded.
spaz:~# vi /etc/apt/preferences

Package: *
Pin: release a=stable
~
/etc/apt/preferences: new file: 2 lines, 33 characters
spaz:~# apt-get -t testing install ssh
E: Command line option 't' [from -t] is not known.
spaz:~#

Naturally the next thing I did was "man apt-get" but that didn't clarify.

Toby



HTH,
Ray
--
Professionele hackers kunnen uw bedrijf veel schade berokkenen.
	Snail-mail spam van het Nederlands Normalisatie-Instituut


--
To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org




-- To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org




--
To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: