From owner-ssh@clinet.fi  Thu Jun 29 17:07:16 2000
Received: from mail.clinet.fi (mail.clinet.fi [194.100.0.7])
	by hutcs.cs.hut.fi (8.9.3/8.9.3) with ESMTP id RAA24125;
	Thu, 29 Jun 2000 17:07:15 +0300 (EET DST)
Received: (from majordom@localhost)
	by mail.clinet.fi (8.9.3/8.9.3) id QAA01396
	for ssh-outgoing; Thu, 29 Jun 2000 16:42:03 +0300
Received: from ssh.com (fw.hel.fi.ssh.com [193.64.193.124])
	by mail.clinet.fi (8.9.3/8.9.3) with ESMTP id QAA01384
	for <ssh@clinet.fi>; Thu, 29 Jun 2000 16:42:02 +0300
Received: from torni.hel.fi.ssh.com (torni.hel.fi.ssh.com [10.1.0.43])
	by ssh.com (8.9.3/8.9.3/SSH-1.16) with ESMTP id QAA26352
	for <ssh@clinet.fi>; Thu, 29 Jun 2000 16:42:02 +0300 (EEST)
Received: (from sshlist@localhost)
	by torni.hel.fi.ssh.com (8.9.3/8.9.3/SSH-1.17) id QAA22268
	for ssh@clinet.fi; Thu, 29 Jun 2000 16:42:02 +0300 (EET DST)
Received: from localhost (wilburn@localhost)
	by wilburn.lanl.gov (8.9.3/8.9.3) with ESMTP id KAA23488;
	Wed, 28 Jun 2000 10:17:30 -0600
X-Authentication-Warning: wilburn.lanl.gov: wilburn owned process doing -bs
Date: Wed, 28 Jun 2000 10:17:29 -0600 (MDT)
From: "W. Scott Wilburn" <wilburn@lanl.gov>
To: Dave Brent <brent@cs.ubc.ca>
cc: ssh@clinet.fi, mfisk@lanl.gov
Subject: Re: F-secure -> Openssh Compatibility
In-Reply-To: <Pine.SOL.4.21.0006280826390.15330-100000@lily.cs.ubc.ca>
Message-ID: <Pine.LNX.4.21.0006281012570.23169-100000@wilburn.lanl.gov>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-ssh@clinet.fi
Precedence: bulk

Dave,

Thanks for the info. I don't think this is the case here, because openssh
defaults to only using ssh1. The man page claims that turning on ssh2 
requires setting the 'Protocol' keyword in the config file. Its possible,
though, that the actual behavior differs from this, so I'll check.

Scott


On Wed, 28 Jun 2000, Dave Brent wrote:

> We saw this, either with, I think with for the Mac.  The exchange of
> version information didn't work, so the server never fell back to 
> ssh1.  Our (temporary) workaround was to put an ssh1 server up on 
> another port and have the Macs use it.
> 
> (we saw this with ssh2 ... haven't tried it with openssh)
> 
> Dave Brent, UBC Computer Science
> 
> On Tue, 27 Jun 2000, W. Scott Wilburn wrote:
> 
> > Date: Tue, 27 Jun 2000 16:09:43 -0600 (MDT)
> > From: W. Scott Wilburn <wilburn@lanl.gov>
> > To: ssh@clinet.fi
> > Subject: F-secure -> Openssh Compatibility
> > 
> > 
> > We have Macintoshes running Fsecure SSH client 1.0.1 which are unable to
> > connect to a server running Openssh 2.1.1 on Red Hat 6.2.
> > 
> > I believe that the problem is a bug with Fsecure, since a 30-day trial
> > version of 1.0.2 works fine. I'm a bit reluctant to tell all the Mac users
> > they have to spend money to upgrade, though, since everything was fine
> > until I switched my machines to OpenSSH from commercial SSH.
> > 
> > Does anyone have any info on this? Is there a workaround?
> > 
> > Symptoms
> > --------
> > 
> > Client side (Mac w/ Fsecure):
> > 
> >    After initiating connection, nothing happens until eventual timeout or
> >    manual quit.
> > 
> > Server side (Linux w/ Openssh)
> > 
> >    Log file reads 
> > 
> > 		Connection from <client IP> port 49153
> > 
> >    After client-side quit, log file reads
> > 
> > 		Did not receive ident string from <client IP>.
> > 
> > 
> > Best regards,
> > Scott Wilburn
> > 
> > -- 
> > *--------------------------------*-------------------------*
> > | W. Scott Wilburn               | Email: wilburn@lanl.gov |
> > | Los Alamos National Laboratory | Phone: (505) 667-2107   |
> > | MS H803                        | Fax:   (505) 665-4121   |
> > | Los Alamos, NM 87545           |                         |
> > *--------------------------------*-------------------------*
> > 
> 

-- 
*--------------------------------*-------------------------*
| W. Scott Wilburn               | Email: wilburn@lanl.gov |
| Los Alamos National Laboratory | Phone: (505) 667-2107   |
| MS H803                        | Fax:   (505) 665-4121   |
| Los Alamos, NM 87545           |                         |
*--------------------------------*-------------------------*
