openssh-lpk Google Group

Re: Issue 15 in openssh-lpk: LPK patch updated for OpenSSH 6.2p1

codesite-nore...@google.com — Fri, 03 May 2013 15:23:09 UT

Comment #4 on issue 15 by alien...@gmail.com: LPK patch updated for OpenSSH
6.2p1
[link]

... and in addition to file name marks, the lines to add are also marked
with "-" vs. "+", and the same "opposite" is for the deleted lines. Pls
clarify.

Re: Issue 15 in openssh-lpk: LPK patch updated for OpenSSH 6.2p1

codesite-nore...@google.com — Fri, 03 May 2013 15:13:57 UT

Comment #3 on issue 15 by alien...@gmail.com: LPK patch updated for OpenSSH
6.2p1
[link]

Don't I see the misspelled lines in the latest patch?
The lines to remove are marked with "**" vs. "---", and lines to add are
marked with "---" vs. "+++". Pls verify.

Re: Issue 15 in openssh-lpk: LPK patch updated for OpenSSH 6.2p1

codesite-nore...@google.com — Tue, 09 Apr 2013 13:04:02 UT

Comment #2 on issue 15 by carsten....@evalcode.net: LPK patch updated for
OpenSSH 6.2p1
[link]

Ok thats nice to know now :) Definitely to prefer since I can stick then to
standard packages again.

Anyway there might still be folks that would prefer a built-in solution

Re: Issue 15 in openssh-lpk: LPK patch updated for OpenSSH 6.2p1

codesite-nore...@google.com — Tue, 09 Apr 2013 09:44:26 UT

Comment #1 on issue 15 by bgmi...@gmail.com: LPK patch updated for OpenSSH
6.2p1
[link]

I believe the reason the related methods were refactored was the inclusion
of a feature that now obsoletes this patch:

20121030
- (djm) OpenBSD CVS Sync

Issue 15 in openssh-lpk: LPK patch updated for OpenSSH 6.2p1

codesite-nore...@google.com — Tue, 09 Apr 2013 09:30:04 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 15 by carsten....@evalcode.net: LPK patch updated for OpenSSH
6.2p1
[link]

I have updated and attached the patch for OpenSSH 6.2p1 - though could use
a little refactoring since OpenSSH refactored some related methods and I

Re: Issue 10 in openssh-lpk: Can it be integrated with the original SSH source code?

codesite-nore...@google.com — Thu, 14 Mar 2013 21:06:53 UT

Comment #1 on issue 10 by tiago.tu...@gmail.com: Can it be integrated with
the original SSH source code?
[link]

I also would like to know :D

--
You received this message because this project is configured to send all
issue notifications to this address.

ldap_search_st(): Timed out (-5)

jdis...@gmail.com (Jonathan Disher) — Thu, 28 Feb 2013 02:48:50 UT

I'm getting immediate failures to bind on Ubuntu 12.04 with openssh-5.9p1
and the 5.9p1 patch applied:
fuwa:~ jdisher$ time ssh host1
Permission denied (publickey).
real 0m0.372s
user 0m0.005s
sys 0m0.003s
The host:
root@host1:~# /usr/sbin/sshd -D
ldap_search_st(): Timed out (-5)
ldap_search_st(): Timed out (-5)

Re: Issue 9 in openssh-lpk: Sun schema has a syntax issue

codesite-nore...@google.com — Sun, 17 Feb 2013 07:35:23 UT

Comment #2 on issue 9 by psarm...@gmail.com: Sun schema has a syntax issue
[link]

Here's a version that works with OpenDJ (and thus likely Sun and OpenDS too)

Attachments:
openssh-lpk_sun.schema 663 bytes

--
You received this message because this project is configured to send all

Re: Issue 3 in openssh-lpk: LDAPS

codesite-nore...@google.com — Tue, 22 Jan 2013 14:15:37 UT

Comment #4 on issue 3 by bgmi...@gmail.com: LDAPS
[link]

Patch to support LDAPS I created for my build for RHEL5.

Attachments:
openssh-lpk-allow-ldaps.patch 1.8 KB

Re: Issue 3 in openssh-lpk: LDAPS

codesite-nore...@google.com — Tue, 22 Jan 2013 12:01:49 UT

Comment #3 on issue 3 by bgmi...@gmail.com: LDAPS
[link]

By that logic, SMTPS, POP3S and IMAPS should not be supported in any email
clients:
[link]

Every LDAP client I need for authentication infrastructure, except LPK,

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 21 Sep 2012 15:29:15 UT

Comment #7 on issue 13 by maxkochu...@gmail.com: LPK patch updated for
OpenSSH 5.9p1
[link]

Hey, folks! FYI: Marc Wäckerlin has already prepared packages for Ubuntu
and Debain with this patch and kindly described all the installation in his

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 21 Sep 2012 15:17:47 UT

Comment #6 on issue 13 by tiago.tu...@gmail.com: LPK patch updated for
OpenSSH 5.9p1
[link]

check your config.log to see what's the problem :)

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 21 Sep 2012 07:37:12 UT

Comment #5 on issue 13 by Franz.Ki...@gmail.com: LPK patch updated for
OpenSSH 5.9p1
[link]

mh, i can not configure both patches (distfiles.. and the attached here
with editing line 351).

./configure --with-ldap --sysconfdir=/etc/ssh --prefix=/usr --with-pam

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 14 Sep 2012 23:59:08 UT

Comment #4 on issue 13 by tiago.tu...@gmail.com: LPK patch updated for
OpenSSH 5.9p1
[link]

Yeah, this really does not compile com ubuntu precise (12.04 -
1:5.9p1-5ubuntu1l)

This one works:
[link]

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 14 Sep 2012 22:44:09 UT

Comment #3 on issue 13 by danielms...@gmail.com: LPK patch updated for
OpenSSH 5.9p1
[link]

This patch doesn't work.

There is a duplicate line on 350/351 and it doesn't compile. It's is a */

Remove line 351 and it works properly.

Re: [openssh-lpk] Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

ra...@randyfay.com (Randy Fay) — Mon, 27 Aug 2012 13:35:37 UT

Hmm. I no longer have access to the Commerceguys infrastructure, as I don't
work there any more. I guess this needs to live somewhere else.

I could probably figure out a place to host this, but I don't use it (and
don't have an LDAP infrastructure to test with). It would probably be best
for somebody else to figure out how to host the packages. Again, I'll be

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Tue, 28 Aug 2012 12:49:02 UT

Comment #2 on issue 13 by e...@unix4fun.net: LPK patch updated for OpenSSH
5.9p1
[link]

ok!

Re: Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Mon, 27 Aug 2012 13:18:44 UT

Comment #1 on issue 13 by tra...@gmail.com: LPK patch updated for OpenSSH
5.9p1
[link]

would you mind adding this patch to the main repo? :)

Issue 14 in openssh-lpk: A feature request.

codesite-nore...@google.com — Mon, 28 May 2012 06:21:15 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 14 by molost...@gmail.com: A feature request.
[link]

I have read the story from debian/ubuntu bug conversations regarding
inclusion into these distros a deb package with lpk patch, and I have a

Issue 13 in openssh-lpk: LPK patch updated for OpenSSH 5.9p1

codesite-nore...@google.com — Fri, 11 May 2012 11:15:09 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 13 by maxkochu...@gmail.com: LPK patch updated for OpenSSH 5.9p1
[link]

I have updated LPK patch for OpenSSH 5.9p1.
File is attached to issue.

Attachments:
openssh-lpk-5.9p1.patch 62.8 KB

Issue 12 in openssh-lpk: Feature request: add LDAP functionality to ssh-copy-id

codesite-nore...@google.com — Sun, 04 Mar 2012 04:58:16 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 12 by johnlo...@gmail.com: Feature request: add LDAP
functionality to ssh-copy-id
[link]
The ssh-copy-id shell script has become the de facto management tool for
uploading public keys to a server for many users. Having LDAP functionality

SSH auth via openLDAP server fails with 'ldap_search_st(): Timed out' error

krishnakur...@gmail.com (Krishna Kurkal) — Wed, 06 Jul 2011 16:49:19 UT

I've been trying to get openssh (with LPK patch) to work with openLDAP
(on Amazon AMI, CentOS 5.4 equivalent I think) to centrally
authenticate instances that I plan to spin up in AWS.

I have got the openLDAP server all setup with a test user created and
the basic configs on the client node in place. And I can get

SSH auth via openLDAP server fails with 'ldap_search_st(): Timed out' error

krishnakur...@gmail.com (Krishna Kurkal) — Wed, 06 Jul 2011 16:29:54 UT

I've been trying to get openssh (with LPK patch) to work with openLDAP
(on Amazon AMI, CentOS 5.4 equivalent I think) to centrally
authenticate instances that I plan to spin up in AWS.

I have got the openLDAP server all setup with a test user created and
the basic configs on the client node in place. And I can get

Re: [openssh-lpk] CENTOS / RHEL.. does anyone have this working for these platforms?

bgmi...@gmail.com (Buchan Milne) — Tue, 31 May 2011 11:50:15 UT

Sorry for the very late reply.
Internally, we have packages for RHEL2.1 through RHEL5.
While investigating building for RHEL6, I found that lpk is shipped in the
RHEL openssh package in 6.1. There is an openssh-ldap subpackage which
includes schema files, and some lpk-specific documentation.
[link]

Re: Issue 11 in openssh-lpk: Feature enhancment

codesite-nore...@google.com — Thu, 31 Mar 2011 13:15:40 UT

Comment #1 on issue 11 by lokidia...@googlemail.com: Feature enhancment
[link]
Sry i marked it wrong. Its a feature enhancement.

Issue 11 in openssh-lpk: Feature enhancment

codesite-nore...@google.com — Thu, 31 Mar 2011 13:11:37 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 11 by lokidia...@googlemail.com: Feature enhancment
[link]
Hallo,
Is it possible to change the needed Shema for example to support Microsoft
AD DS ?
So this would be support more Directory Services. As far i understand, only

Issue 10 in openssh-lpk: Can it be integrated with the original SSH source code?

codesite-nore...@google.com — Sat, 26 Feb 2011 19:17:46 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 10 by kua...@gmail.com: Can it be integrated with the original
SSH source code?
[link]
It would be great if you help the original ssh to have your code- so no one
needs to apply the patch separately-

Re: Issue 9 in openssh-lpk: Sun schema has a syntax issue

codesite-nore...@google.com — Thu, 27 Jan 2011 20:32:46 UT

Comment #1 on issue 9 by da...@davidstrauss.net: Sun schema has a syntax
issue
[link]
It would also be good to drop all totally blank lines out of the Sun
schema. Blank lines also don't work with OpenDJ.

Issue 9 in openssh-lpk: Sun schema has a syntax issue

codesite-nore...@google.com — Thu, 27 Jan 2011 20:28:42 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 9 by da...@davidstrauss.net: Sun schema has a syntax issue
[link]
1. Download the Sun version of the schema and drop it into OpenDJ
2. See a syntax error:
[27/Jan/2011:20:11:45 +0000] 0 caught error thread={main(1)}

CENTOS / RHEL.. does anyone have this working for these platforms?

mma...@gmail.com (Cowmix) — Sun, 19 Dec 2010 18:51:08 UT

I'm about to start working with this patch for my CENTOS systems.
Before I dive into it, I wanted to know if anyone had this working for
those OSes?

thanks!

Fun compiling in ubuntu 10.10: wrong patch

raubvo...@gmail.com (Mauricio Tavares) — Thu, 02 Dec 2010 22:46:01 UT

So, I get the source (apt-get source openssh) for the debian openssh,
which for 10.10 is openssh_5.5p1 as of now. Not know which patch to
apply I select contrib-openssh-lpk-5.4p1-0.3. 13.patch, which seems to
work but wants me to manually change Makefile.in and version.h.
When I try to build it, it claims not to be able to find the orig.tar

Re: Link to Debian docs is dead

raubvo...@gmail.com (Mauricio) — Thu, 02 Dec 2010 22:40:05 UT

I think [link]
is now [link],
right? If so, perhaps the link in [link]
needs to be upgraded.

Forward-port of contrib/openssh-lpk-5.4p1-0.3.13 to 5.6p1

d...@opencsw.org (Dagobert Michelsen) — Tue, 16 Nov 2010 15:53:44 UT

Hi,

I forward-ported contrib/openssh-lpk-5.4p1-0.3. 13 to apply to 5.6p1:

[link]

Best regards

-- Dago

Re: Permission denied (publickey) when I ssh out but no problems the other way around

reach.siddhar...@gmail.com (SJ) — Fri, 08 Oct 2010 22:57:09 UT

Will help if you can post sshd_config and /etc/ldap.conf from both
machines.

Are both machines running the same distribution and patch level?

Re: [openssh-lpk] Permission denied (publickey) when I ssh out but no problems the other way around

tony...@gmail.com (Tony G.) — Tue, 05 Oct 2010 18:15:35 UT

Mauricio,
You need to have your private keys in linux2 to be able to connect to 1.

Permission denied (publickey) when I ssh out but no problems the other way around

raubvo...@gmail.com (Mauricio Tavares) — Mon, 04 Oct 2010 20:33:24 UT

let's say I have openssh-lpk in two linux boxes, linux1 and linux2. If I
linux1> ssh linux2
linux2>
But if I go the other way around,
linux2> ssh linux1
Permission denied (publickey).
linux2>
I am using the same LDAP account in both machines. Why wouldn't it be
able to get the keys in linux2 when I try to ssh to linux1? using

Re: [openssh-lpk] Link to Debian docs is dead

eric.a...@gmail.com (Eric Auge) — Wed, 08 Sep 2010 20:23:46 UT

Oh.. not good, thanks telling me this.
Will fix that.
Thank you,
Rgs,
Eric.

Issue 8 in openssh-lpk: update patch against 5.6p1

codesite-nore...@google.com — Tue, 24 Aug 2010 12:27:36 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 8 by elan.ruusamae: update patch against 5.6p1
[link]
hi
i've updated lpk patch against 5.6p1 codebase:
[link]

Re: LDAP Activation for openssh

reach.siddhar...@gmail.com (SJ) — Sun, 25 Jul 2010 22:14:01 UT

Read the documentation:
[link]

LDAP Activation for openssh

yo...@gmx.net (genius0815) — Thu, 15 Jul 2010 12:12:30 UT

Hi,

i patched the openssh-server and client with the latest opessh-lpk.
Now i wanted activate the LDAP functionality for SSH Keys. How can i
do this?

Thanks for help,
yonah

Link to Debian docs is dead

tim.st...@gmail.com (Tim Stoop) — Mon, 12 Jul 2010 09:39:10 UT

Hi all,

Just wanted to let you know that the link on the frontpage of the
Google Code page to the Debian documentation is pointing to a 404. You
might want to fix that.

--
Kind regards,
Tim

Re: [openssh-lpk] OpenLDAP referential integrity and posixGroup requirement for LPK

eric.a...@gmail.com (Eric Auge) — Mon, 24 May 2010 16:55:25 UT

This is very interesting, is this form the latest OpenLDAP release?!

eric.

--
You received this message because you are subscribed to the Google Groups "openssh-lpk" group.
To post to this group, send email to openssh-lpk@googlegroups.com.
To unsubscribe from this group, send email to openssh-lpk+unsubscribe@google groups.com.

[openssh-lpk] OpenLDAP referential integrity and posixGroup requirement for LPK

reach.siddhar...@gmail.com (SJ) — Tue, 18 May 2010 21:51:04 UT

Hi All,

OpenLDAP now supports a referential integrity module that allows auto-
clean up of group memberships when a DN is removed. This module only
supports clean-up of attributes that hold the whole DN. So, when a
user is removed, refint will clean-up all "member" values of the
removed DN that are part of "groupbyName" objects but not

[openssh-lpk] Re: LPK in mainline OpenSSH

cuzi...@gmail.com (cuzic4n) — Fri, 16 Apr 2010 19:28:05 UT

Just wanted to add that this is exactly what I needed/wanted. Having
it included w/n openssh would have this deployed to over 1000 *nix
servers at my work. Unfortunately it is not there yet, but thought I
would drop a line here in support of the effort anyways.

Many regulations are coming down that unix needs multiple factors/2

[openssh-lpk] r27 committed - Added contribution from Robin H. Johnson @ gentoo...

codesite-nore...@google.com — Mon, 05 Apr 2010 10:49:27 UT

Revision: 27
Author: eric.auge
Log: Added contribution from Robin H. Johnson @ gentoo
Which introduce several changes that have to be integrated
in the next release.
These patches have been added to the contrib directory and are labeled
with a version > to the official old non updated one, however these are

[openssh-lpk] r26 committed - fixed some filename prefixed with 'g', I don't know why..

codesite-nore...@google.com — Mon, 05 Apr 2010 10:40:22 UT

Revision: 26
Author: eric.auge
Log: fixed some filename prefixed with 'g', I don't know why..
[link]
Modified:
/trunk/patch/contrib/openssh-l pk-0.3.10_5.4p1.patch
============================== =========
--- /trunk/patch/contrib/openssh-l pk-0.3.10_5.4p1.patch Fri Mar 12 00:33:18

Server fingerprint

reach.siddhar...@gmail.com (SJ) — Thu, 18 Mar 2010 01:38:31 UT

Are there any plans to support storing server fingerprints in LDAP and
allow ssh client to lookup LDAP?

Re: [openssh-lpk] Issue 7 in openssh-lpk: OpenSSH 5.4p1 Support [Updated Patches]

eau-c...@unix4fun.net (Eric Augé) — Sat, 13 Mar 2010 09:49:01 UT

Hello,
I have added it to the contributions in the LPK repository, thanks a lot.
Cheers,
Eric.

[openssh-lpk] r25 committed - Contribution from ph.mgraziano...

codesite-nore...@google.com — Fri, 12 Mar 2010 08:33:59 UT

Revision: 25
Author: eric.auge
Log: Contribution from ph.mgraziano
OpenSSH 5.4p1 patch update (non official)

[link]

Added:
/trunk/patch/contrib/openssh-l pk-0.3.10_5.4p1-64bit.patch
/trunk/patch/contrib/openssh-l pk-0.3.10_5.4p1.patch

Issue 7 in openssh-lpk: OpenSSH 5.4p1 Support [Updated Patches]

codesite-nore...@google.com — Wed, 10 Mar 2010 22:41:52 UT

Status: New
Owner: ----
Labels: Type-Defect Priority-Medium
New issue 7 by ph.mgraziano: OpenSSH 5.4p1 Support [Updated Patches]
[link]
I've forward-ported OpenSSH-LPK to today's 5.4p1 release; no significant
fuzz, but regression
testing is welcomed. This patch is based on the OpenSSH-LPK 0.3.10