topic Re: Privilege separation user sshd does not exist in Operating System - HP-UX

Privilege separation user sshd does not exist

Jdamian — Tue, 30 Sep 2003 09:49:47 GMT

Hi.

I upgraded HP OpenSSH (product number T1471AA) from 3.10.002 to 3.50.000.

When starting new OpenSSH daemon, the following error message is printed:

9562: Privilege separation user sshd does not
exist
# IT CODE: 255

I added the following entry in /etc/opt/ssh/sshd_config file:

UsePrivilegeSeparation no

Then OpenSSH starts but my old OpenSSH configurations (3.10.002) didn't include this entry and started fine. This entry is available in both releases (man pages show it) but...
why wasn't necessary in old release ?

How many other hidden tricks are ?

Thanx a lot.

Re: Privilege separation user sshd does not exist

Brian Bergstrand — Tue, 30 Sep 2003 10:08:30 GMT

Privelage separation was added in the 3.4 release I believe. If you want to use it (and you should), just create a sshd user and then re-enable the option in your config file.

As for hidden tricks, there are none. Each release can add something new, but it is all documented in the page or on the web.

HTH.

PS: HP's latest OSSH bundle is 3.6.1 with the buffer patch from 3.7.1. You probably should grab that.

Re: Privilege separation user sshd does not exist

Brian Bergstrand — Tue, 30 Sep 2003 10:09:25 GMT

Sorry, that should be:

"all documented in the MAN page or on the web"