Subject: ssh use of $HOME
To: NetBSD current-users <current-users@netbsd.org>
From: Andreas Wrede <andreas@planix.com>
List: current-users
Date: 01/31/2007 13:24:28
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-1-834624417
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed

In NetBSD 4.0_BETA2 (and presumable -current), ssh sessions started  
from cron jobs fail with "Host key verification failed".  The cause  
of this is the patch from PR/13738, committed on Sep 18, 2005 to src/ 
crypto/dist/ssh/tildexpand.c (now in src/crypto/dist/ssh/misc.c)  
together with crontab's default HOME=/var/log setting. This causes  
ssh to look for the id_* files in /var/log/.ssh/.

The original PR author's reason for the patch was "ssh(1) talks about  
$HOME/.ssh...".  The ssh man page replaced $HOME with ~ in OpenBSD  
rev 1.206 of ssh.1.

I think the patch should be reverted.

-- 
     aew


--Apple-Mail-1-834624417
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFFwN7fEh/h9J/TQyERAopjAJ4wYYdOyOEEIOpXn9D/va5d+74XWACgzotH
CyyChXzlOA3653shJXTBG3U=
=XhAu
-----END PGP SIGNATURE-----

--Apple-Mail-1-834624417--