Re: [Savannah-hackers] ssh/rsync bug

[Loic Dachary]

Paul Fisher writes:
 > There's a bug in ssh 1.2.3-9 that ships with debian which randomly
 > causes rsync to hang.  We use rsync over ssh to backup the gnu
 > machines nightly, and so this is a problem.  Currently ssh
 > 1.2.3-9.2loic is installed.  What's different about the loic version
 > from the standard debian package?
 > 
 > If at all possible could we upgrade to 3.0.2p1-6?

        Hi, 

        The differences are documented in 

http://savannah.gnu.org/savannah.html

The sshd daemon has been rebuilt with the following patch so that CVS
ssh operations have the proper set of groups. The sources are in
/usr/local/src/openssh-1.2.3/ and the corresponding debian package is
at /usr/local/src/ssh_1.2.3-9.2loic_i386.deb. The package was tagged
on hold using dselect to prevent accidental upgrade. Note that this
patch may have hideous impact for users who have real account and use
ssh since most of the commands that deal with groups have not been
recompiled to handle more than the limit of 32 groups. For instance
the id command will core dump. Here is the patch applied on the
distribution:

        Other than this, it can be upgraded. Of course care must be taken
with the system wide configuration files so that ssh *always* acts as an
ssh1 only daemon.

        Cheers,

-- 
Loic   Dachary         http://www.dachary.org/  address@hidden
12 bd  Magenta         http://www.senga.org/      address@hidden
75010    Paris         T: 33 1 42 45 07 97          address@hidden
        GPG Public Key: http://www.dachary.org/loic/gpg.txt