14 ms·

If you have a mac (Yosemite), it looks like you want to add " UseRoaming no" under the "Host *" line in /etc/ssh_config (as root). You can test it before and

If you have a mac (Yosemite), it looks like you want to add " UseRoaming no" under the "Host *" line in /etc/ssh_config (as root). You can test it before and after with this: ssh -v -T git@github.com 2>&1 | grep Roaming debug1: Roaming not allowed by server <- bad ssh -v -T git@github.com 2>&1 | grep Roaming (no output is good)

super_mario 11y ago
On El Capitan the file is /etc/ssh/ssh_config
- snowwrestler 11y ago
  On Mountain Lion it's /private/etc/ssh_config.
  - astrange 11y ago
    /etc points to /private/etc on OS X, so it's all good.
deleted 11y ago
[deleted]
lftl 11y ago
Interestingly I haven't been able to get the Roaming not allowed message to show on my client with or without the config option set.
- antoinealb 11y ago
  Did you copy the whole line as "g ssh -v -T git@github.com 2>&1 | grep "Roaming debug1: Roaming not allowed by server"" ? I misread GP's command and made that mistake. The correct command is : ssh -v -T git@github.com 2>&1 | grep "Roaming"
  - nulltype 11y ago
    My bad, the comment system stripped my newlines. Fixed the post.
  - lftl 11y ago
    It looks like arch just got the fix in really quick. I didn't recall updating my box this morning but I must have, because I already had the patched version in place.
metavida 11y ago
A few of my friends found multiple copies of ssh_config lying around, so I wrote this one-liner that looks at 3 separate known ssh_config files & patches any vulnerable ones that it finds. $ for SSH_CONF in /etc/ssh/ssh_config /etc/ssh_config /private/etc/ssh_config; do [ -f $SSH_CONF ] && ! grep -q 'UseRoaming no' $SSH_CONF && echo "Patching $SSH_CONF" && echo -e '\nHost *\n UseRoaming no' | sudo tee -a $SSH_CONF > /dev/null; done
noterminal 11y ago
Here is a user-friendly script that will disable UseRoaming on your os x computer. If you want to send this out to your coworkers, remind them that they have to right-click and choose open to execute a .command script (unless they have "allow apps downloaded from anywhere" enabled) https://gist.github.com/logicalmethods/49f42190406667cbbbee https://gist.github.com/logicalmethods/49f42190406667cbbbee

super_mario 11y ago

On El Capitan the file is /etc/ssh/ssh_config

snowwrestler 11y ago
On Mountain Lion it's /private/etc/ssh_config.
- astrange 11y ago
  /etc points to /private/etc on OS X, so it's all good.

deleted 11y ago

[deleted]

lftl 11y ago

Interestingly I haven't been able to get the Roaming not allowed message to show on my client with or without the config option set.

antoinealb 11y ago
Did you copy the whole line as "g ssh -v -T git@github.com 2>&1 | grep "Roaming debug1: Roaming not allowed by server"" ? I misread GP's command and made that mistake. The correct command is : ssh -v -T git@github.com 2>&1 | grep "Roaming"
- nulltype 11y ago
  My bad, the comment system stripped my newlines. Fixed the post.
- lftl 11y ago
  It looks like arch just got the fix in really quick. I didn't recall updating my box this morning but I must have, because I already had the patched version in place.

metavida 11y ago

A few of my friends found multiple copies of ssh_config lying around, so I wrote this one-liner that looks at 3 separate known ssh_config files & patches any vulnerable ones that it finds. $ for SSH_CONF in /etc/ssh/ssh_config /etc/ssh_config /private/etc/ssh_config; do [ -f $SSH_CONF ] && ! grep -q 'UseRoaming no' $SSH_CONF && echo "Patching $SSH_CONF" && echo -e '\nHost *\n UseRoaming no' | sudo tee -a $SSH_CONF > /dev/null; done

noterminal 11y ago

Here is a user-friendly script that will disable UseRoaming on your os x computer. If you want to send this out to your coworkers, remind them that they have to right-click and choose open to execute a .command script (unless they have "allow apps downloaded from anywhere" enabled) https://gist.github.com/logicalmethods/49f42190406667cbbbee https://gist.github.com/logicalmethods/49f42190406667cbbbee