From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 05 Jun 2025 12:14:24 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uN7c7-003yXm-0g for lore@lore.pengutronix.de; Thu, 05 Jun 2025 12:14:24 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1uN7c6-0007rG-Rm; Thu, 05 Jun 2025 12:14:22 +0200 Received: from mail.thorsis.com ([217.92.40.78]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1uN7bv-0007r4-0o for ptxdist@pengutronix.de; Thu, 05 Jun 2025 12:14:12 +0200 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id C1DEF1483B35; Thu, 5 Jun 2025 12:14:09 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1749118450; h=from:subject:date:message-id:to:cc:mime-version:content-type: in-reply-to:references; bh=0PNVSqwoG3u4S/UvTowlzpC3/wbFJ415VQDcGbArd0I=; b=ZrAdp4sui6QnA6kSDvCzN06FiKt7hDIPx4otyLppInt2wwFhU0I/2UIyBEUCAVgh0fgoud IcOZNTguSNnq3WZJNHfAOvgssCG2Qfm1L2HPFgzMu0YmS3UQGL4hLiKY783CIKPkLnL7jp P29nfEnogEyrkFarxTWhhwLtul5XiDE3J/fAbVFbHs8dyUaH5gxqbzpb7gxtR6PAzb7+jc YP7faPgPpbnPS1ne+weJnr6wlL62FRKBoZkn9AWUYiehAZ/dBwNvqFLx0joPk3qFz9sXpb L+PKIjMCi3mRr/vvvvW+aVr+AJclEjtdWsGO7A5my2nSNC0+EFXgcQtPSC6TrQ== Date: Thu, 5 Jun 2025 12:14:05 +0200 To: ruggero rossi via ptxdist Message-ID: <20250605-bucktooth-yearly-36d03efc11cc@thorsis.com> Mail-Followup-To: ruggero rossi via ptxdist , ruggero rossi References: <20250605113241.3733ed9b@RR-Laptop> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20250605113241.3733ed9b@RR-Laptop> User-Agent: Mutt/2.2.12 (2023-09-09) X-Last-TLS-Session-Version: TLSv1.3 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.3 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] problems with openssh 10.0p1 in ptxdist 2025.05.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Alexander Dahl via ptxdist Reply-To: ptxdist@pengutronix.de Cc: Alexander Dahl , ruggero rossi Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hello Ruggero, Am Thu, Jun 05, 2025 at 11:32:41AM +0200 schrieb ruggero rossi via ptxdist: > Migrating to ptxdist 2025.05.0 I got a problem with openssh 10.0p1 (or p2, > whatever is the official name). > > The openssh server does not start. > > Starting it manually, I get the message: > /usr/sbin/sshd-auth does not exist or is not executable > > Installing /usr/sbin/sshd-auth solves the problem. > > Maybe this is due to some unfortunate combination of old libc and legacy > certificates, however in the release note of openssh 10.0.p2 I read: > > "this release removes the code responsible for the user authentication > phase of the protocol from the per connection sshd-session binary to a new > sshd-auth binary..... Downstream distributors of OpenSSH will need to > package the sshd-auth binary." > > In case the problem is confirmed, attached there is a patch. The same problem was addressed with commit c240fdd0de4f9b15263a6b8dae2e17a510dafd66 ("openssh: install missing sshd-auth binary") in ptxdist master earlier this week. Greets Alex > > Best regards, > > Ruggero > --- rules/openssh.make.org 2025-06-05 10:56:26.949816645 +0200 > +++ rules/openssh.make 2025-06-05 10:57:19.878901998 +0200 > @@ -108,6 +108,8 @@ > /usr/sbin/sshd) > @$(call install_copy, openssh, 0, 0, 0755, -, \ > /usr/sbin/sshd-session) > + @$(call install_copy, openssh, 0, 0, 0755, -, \ > + /usr/sbin/sshd-auth) > ifdef PTXCONF_OPENSSH_SSHD_GENKEYS > @$(call install_alternative, openssh, 0, 0, 0755, /etc/rc.once.d/openssh) > endif