From VM Fri Jun 14 13:12:05 1996
Content-Length: 1187
X-VM-v5-Data: ([nil nil nil nil nil nil nil nil nil]
	["1187" "Fri" "14" "June" "1996" "00:26:45" "-0500" "Michael Brennen" "mbrennen@fni.com" nil "25" "Re: ssh 1.2.14 with Shadow-Suite 960129 (Linux)" "^From:" nil nil "6" nil nil nil nil]
	nil)
Return-Path: owner-ssh@clinet.fi
Received: from hauki.clinet.fi (root@hauki.clinet.fi [194.100.0.1]) by hutcs.cs.hut.fi (8.7.5/8.7.3) with ESMTP id IAA16759; Fri, 14 Jun 1996 08:33:35 +0300 (EET DST)
Received: (daemon@localhost) by hauki.clinet.fi (8.7.5/8.6.4) id IAA22065 for ssh-outgoing; Fri, 14 Jun 1996 08:26:58 +0300 (EET DST)
Received: from ns1.fni.com (root@ns1.fni.com [204.181.104.1]) by hauki.clinet.fi (8.7.5/8.6.4) with ESMTP id IAA22054 for <ssh@clinet.fi>; Fri, 14 Jun 1996 08:26:51 +0300 (EET DST)
Received: from ns1.fni.com (mbrennen@ns1.fni.com [204.181.104.1]) by ns1.fni.com (8.7.5/8.7.3) with SMTP id AAA13759; Fri, 14 Jun 1996 00:26:45 -0500
In-Reply-To: <199606131232.PAA13637@pilari.ssh.fi>
Message-ID: <Pine.LNX.3.91.960614001040.10536S-100000@ns1.fni.com>
Precedence: bulk
From: Michael Brennen <mbrennen@fni.com>
Sender: owner-ssh@clinet.fi
To: ssh@clinet.fi
cc: Greg Patterson <root@gomer.mlink.net>
Subject: Re: ssh 1.2.14 with Shadow-Suite 960129 (Linux)
Date: Fri, 14 Jun 1996 00:26:45 -0500 (CDT)
Content-Type: TEXT/PLAIN; charset=US-ASCII
MIME-Version: 1.0

On Thu, 13 Jun 1996, Tatu Ylonen wrote:

> > Is ssh 1.2.14 known to not work with the Linux Shadow-960129 (appears to 
> > be the "current" version)?
> 
> Ssh has been tested earlier to work with one of the linux shadow
> password systems, but not very recently.

I am using the shadow-3.2.2 suite and ssh 1.2.13 and 1.2.14 built cleanly
against it.  I use this one in particular because it is the one I could
get logdaemon to compile against.  I made a few changes to logdaemon-5.2
to add shadow support to the linux-skey compile of logdaemon's login.  I
submitted a patch file to Wietse a couple of weeks ago to add a
shadow-skey option to the source tree, and I think he accepted them.  A
linux-shadow-skey compile option may be in the next logdaemon release. 

I could not get shadow-960129 to build against logdaemon's skey package; 
a routine was missing from the skey library that shadow wanted.  I looked
at it briefly but just don't have the time right now to finish the hacks
to shadow-960129 at the level it needs to be done.

I suppose most of this post is not very ssh related, but hopefully it will
be useful to someone from a broader security perspective. 

   -- Michael