topic Re: SSH protocol on OpenVMS in Operating System - OpenVMS

SSH protocol on OpenVMS

Thomas A. Williams — Tue, 22 Aug 2006 07:55:40 GMT

We've got a problem with a PC client not handling an expired password correctly. The PC client vendor has said the following:

" think that Extra! is not supporting the input_userrauth_passwd_changereq OpenVMS SSH Server command, because OpenVMS SSH Server is not based on OpenSSH standards, but it is based on SSH2 Software from a company called SSH Communications Security. "

Question: Is what they say true - SSH on OpenVMS is NOT based on OpenSSH?

And is the "input_userrauth_passwd_changereq" signal non-standard?

Thanks in advance.

Re: SSH protocol on OpenVMS

Steven Schweda — Tue, 22 Aug 2006 09:46:42 GMT

> [...] SSH on OpenVMS is NOT based on OpenSSH?

True enough. For example, the key file
formats differ. (Search this forum for
"ssh-keygen".)

But that doesn't imply that it's defective.

I know nothing specific about what happens
with an expired password.

Re: SSH protocol on OpenVMS

Richard Whalen — Mon, 28 Aug 2006 09:33:13 GMT

The SSH_MSG_USERAUTH_PASSWD_CHANGEREQ is defined in RFC 4252. The language describing it uses a lot of "SHOULD" and "MAY", so it should be considered an optional part of the protocol, not a mandatory part of the protocol.

OpenSSH does not define the standard. The RFCs do.

Re: SSH protocol on OpenVMS

Thomas A. Williams — Mon, 28 Aug 2006 10:21:26 GMT

The PC client vendor has acknowledged the problem and will be issuing a patch. Thanks for the help.