[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian and OpenBSD -- ssh compatibility?



On 31, jul, 2000 at 01:10:47 -0700, kmself@ix.netcom.com wrote:
> On Mon, Jul 31, 2000 at 12:52:18PM -0700, Sean 'Shaleh' Perry wrote:
> > 
> > On 31-Jul-2000 kmself@ix.netcom.com wrote:
> > > I'm configuring an OpenBSD firewall in front of my Debian box.  Current
> > > problem is getting compatible versions of ssh on both boxes.
> > > 
> > > I can ssh FROM OpenBSD to Debian, but not TO OpenBSD from Debian.
> > > Error message on attempting OpenBSD connection:
> > > 
> > >       Disconnecting: Bad packet length 1349676916.
> > > 
> > > ...on the OBSD side, I get the following in /var/log/authlog:
> > > 
> > >       Jul 31 05:32:37 jung sshd[32168]: Protocol major versions differ for 
> > >       192.168.0.32: SSH-2.0-OpenSSH-2.1 vs. SSH-1.5-OpenSSH-1.2.3
> > > 
> > > I obviously need to get compatible versions of ssh, but I'm not sure
> > > which end to even up, or (for the OBSD side) how to do it.  My
> > > understanding is that OpenSSH 1.2.3 is licensed freely, that SSH-2 is
> > > not, and that there isn't a free version of OpenSSH-2 available for
> > > Debian.
> > > 
> > 
> > openSSH is free, whether it is 2.0 or 1.x.  I am uncertain that we
> > have packaged 2.0 though.  An easy solution temporarily is to install
> > 1.2 openSSH on the bsd box.
> 
> I would if I knew how.  I'm still puzzling out the OpenBSD packaging
> system.  "ports" installs stuff under /usr/local.  Sacrilege!

You need to have the portstree installed, first of all. :-)

As root: cd /usr/ports/<somewhere>/ssh  and do a `make install' there
while on-line so the sources can be fetched. That way you get an old
openssh in /usr/local/bin, and keep the new openssh in /usr/bin.

Installing to /usr/local is thoroughly[1] logical i the OpenBSD sense,
it's not part of the ``distro'', it is not audited code ...

Oh well, I'm just in love with the combination of OpenBSD and Debian,
with those two tou have the tools for most jobs. ;-)

HAND
	Morten

-- 
UNIX, reach out and grep someone!



Reply to: