[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#154645: ssh does read /etc/hosts



Package: ssh
Version: 1:3.8.1p1-8.sarge.4
Followup-For: Bug #154645


I'm just looking through old bug reports seeing if there's any I can
help close, and I think I can confirm that on a default installation of
the current Debian stable release (3.1), ssh *does* honour the contents
of /etc/hosts:

  grimoire@host:~$ host thisisnotahostname
  Host thisisnotahostname not found: 3(NXDOMAIN)
  grimoire@host:~$ grep thisisnotahostname /etc/hosts
  82.69.130.94    thisisnotahostname
  grimoire@host:~$ ssh -p 2200 thisisnotahostname
  The authenticity of host 'thisisnotahostname (82.69.130.94)' can't be established.
  RSA key fingerprint is 8d:6a:70:cd:8c:7f:d3:1b:2b:58:07:39:97:36:e3:37.
  Are you sure you want to continue connecting (yes/no)? no
  Host key verification failed.
  grimoire@host:~$ COLUMNS=100 dpkg -l ssh | grep ssh
  ii  ssh                 3.8.1p1-8.sarge.4   Secure rlogin/rsh/rcp replacement (OpenSSH)

For what it's worth:

  grimoire@host:~$ grep hosts /etc/nsswitch.conf
  hosts:          files dns
  grimoire@host:~$ cat /etc/host.conf
  order hosts,bind
  multi on

If there's any more information I can provide, please let me know.

Dave

-- System Information:
Debian Release: 3.1
Architecture: i386 (i586)
Kernel: Linux 2.4.27-2-386
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages ssh depends on:
ii  adduser                     3.63         Add and remove users and groups
ii  debconf                     1.4.30.13    Debian configuration management sy
ii  dpkg                        1.10.28      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam-runtime              0.76-22      Runtime support for the PAM librar
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  libwrap0                    7.6.dbs-8    Wietse Venema's TCP wrappers libra
ii  zlib1g                      1:1.2.2-4    compression library - runtime

-- debconf information:
  ssh/insecure_rshd:
  ssh/ssh2_keys_merged:
  ssh/user_environment_tell:
* ssh/forward_warning:
  ssh/insecure_telnetd:
  ssh/new_config: true
* ssh/use_old_init_script: true
* ssh/protocol2_only: true
  ssh/encrypted_host_key_but_no_keygen:
* ssh/run_sshd: true
* ssh/SUID_client: true
  ssh/disable_cr_auth: false




Reply to: