Menu

#76 Remote SSH login problem

LINUX
open
nobody
None
5
2017-03-03
2015-08-16
johanax
No

Hi,
I am having a problem when trying to connect to my gentoo server with SSH. See error message below.

Regards Johan

Aug 16 10:41:10 phi4 sshd[20077]: debug3: fd 5 is not O_NONBLOCK
Aug 16 10:41:10 phi4 sshd[20077]: debug1: Forked child 20082.
Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: entering fd = 8 config len 322
Aug 16 10:41:10 phi4 sshd[20077]: debug3: ssh_msg_send: type 0
Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: done
Aug 16 10:41:10 phi4 sshd[20082]: debug3: oom_adjust_restore
Aug 16 10:41:10 phi4 sshd[20082]: Set /proc/self/oom_score_adj to 0
Aug 16 10:41:10 phi4 sshd[20082]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
Aug 16 10:41:10 phi4 sshd[20082]: debug1: inetd sockets after dupping: 3, 3
Aug 16 10:41:10 phi4 sshd[20082]: Connection from 88.89.21.77 port 21157 on 83.168.196.188 port 22
Aug 16 10:41:10 phi4 sshd[20082]: debug1: HPN Disabled: 0, HPN Buffer Size: 87380
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Client protocol version 2.0; client software version cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: SSH: Server;Ltype: Version;Remote: 88.89.21.77-21157;Protocol: 2.0;Client: cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: debug1: no match: cryptlib
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Enabling compatibility mode for protocol 2.0
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1-hpn14v5
Aug 16 10:41:10 phi4 sshd[20082]: debug2: fd 3 setting O_NONBLOCK
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_init: preparing seccomp filter sandbox
Aug 16 10:41:10 phi4 sshd[20082]: debug2: Network child is on pid 20083
Aug 16 10:41:10 phi4 sshd[20082]: debug3: preauth child monitor started
Aug 16 10:41:10 phi4 sshd[20082]: debug3: privsep user:group 22:22 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: permanently_set_uid: 22/22 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: SSH2_MSG_KEXINIT sent [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: error: Received disconnect from 88.89.21.77: 2: Handshake failed [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
Aug 16 10:41:10 phi4 sshd[20082]: debug1: monitor_read_log: child log fd closed
Aug 16 10:41:10 phi4 sshd[20082]: debug3: mm_request_receive entering
Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup
Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup entering
Aug 16 10:41:10 phi4 sshd[20082]: debug1: Killing privsep child 20083

Discussion

  • Bjarke Viksøe

    Bjarke Viksøe - 2015-08-16

    Hi,

    I think this could be related to recent changes in the OpenSSH library of your SSH server. Specifically this problem http://permalink.gmane.org/gmane.comp.encryption.cryptlib/2832 was reported to the CryptLib library also used by BVRDE.

    I'll try to investigate how to work around this.

    regards
    bjarke

     
    • johanax

      johanax - 2016-02-05

      Hi Bjarke,
      any success with your investigation?

      Regards Johan

      --
      JA MarinTech
      Johan Axelsson
      M.Sc. Naval Architect
      http://www.marintech.se

      "For every complex problem, there is a solution that is simple, neat,
      and wrong." H.L. Mencken

      On 2015-08-16 22:06, Bjarke Viksøe wrote:

      Hi,

      I think this could be related to recent changes in the OpenSSH library
      of your SSH server. Specifically this problem
      http://permalink.gmane.org/gmane.comp.encryption.cryptlib/2832 was
      reported to the CryptLib library also used by BVRDE.

      I'll try to investigate how to work around this.

      regards
      bjarke


      [BUGS:#76] [1] REMOTE SSH LOGIN PROBLEM

      STATUS: open
      GROUP: LINUX
      CREATED: Sun Aug 16, 2015 08:43 AM UTC by johanax
      LAST UPDATED: Sun Aug 16, 2015 08:43 AM UTC
      OWNER: nobody

      Hi,
      I am having a problem when trying to connect to my gentoo server with
      SSH. See error message below.

      Regards Johan

      Aug 16 10:41:10 phi4 sshd[20077]: debug3: fd 5 is not O_NONBLOCK
      Aug 16 10:41:10 phi4 sshd[20077]: debug1: Forked child 20082.
      Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: entering fd
      = 8 config len 322
      Aug 16 10:41:10 phi4 sshd[20077]: debug3: ssh_msg_send: type 0
      Aug 16 10:41:10 phi4 sshd[20077]: debug3: send_rexec_state: done
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: oom_adjust_restore
      Aug 16 10:41:10 phi4 sshd[20082]: Set /proc/self/oom_score_adj to 0
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: rexec start in 5 out 5
      newsock
      5 pipe 7 sock 8
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: inetd sockets after dupping:
      3, 3
      Aug 16 10:41:10 phi4 sshd[20082]: Connection from 88.89.21.77 port
      21157
      on 83.168.196.188 port 22
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: HPN Disabled: 0, HPN Buffer
      Size: 87380
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: Client protocol version 2.0;
      client software version cryptlib
      Aug 16 10:41:10 phi4 sshd[20082]: SSH: Server;Ltype: Version;Remote:
      88.89.21.77-21157;Protocol: 2.0;Client: cryptlib
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: no match: cryptlib
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: Enabling compatibility mode
      for protocol 2.0
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: Local version string
      SSH-2.0-OpenSSH_6.7p1-hpn14v5
      Aug 16 10:41:10 phi4 sshd[20082]: debug2: fd 3 setting O_NONBLOCK
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_init: preparing
      seccomp filter sandbox
      Aug 16 10:41:10 phi4 sshd[20082]: debug2: Network child is on pid 20083
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: preauth child monitor started
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: privsep user:group 22:22
      [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: permanently_set_uid: 22/22
      [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: setting
      PR_SET_NO_NEW_PRIVS [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: ssh_sandbox_child: attaching
      seccomp filter program [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: list_hostkey_types:
      ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: SSH2_MSG_KEXINIT sent
      [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: error: Received disconnect from
      88.89.21.77: 2: Handshake failed [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup
      entering [preauth]
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: monitor_read_log: child log
      fd
      closed
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: mm_request_receive entering
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: do_cleanup
      Aug 16 10:41:10 phi4 sshd[20082]: debug3: PAM: sshpam_thread_cleanup
      entering
      Aug 16 10:41:10 phi4 sshd[20082]: debug1: Killing privsep child 20083


      Sent from sourceforge.net because you indicated interest in
      https://sourceforge.net/p/bvrde/bugs/76/

      To unsubscribe from further messages, please visit
      https://sourceforge.net/auth/subscriptions/

      [1] http://sourceforge.net/p/bvrde/bugs/76/

       
      • Andrey Zibrov

        Andrey Zibrov - 2016-03-29

        it seems that the problem is in current realization of OpenSSH (6.7)

        Please look at this link:
        http://stackoverflow.com/questions/26424621/algorithm-negotiation-fail-ssh-in-jenkins
        Matthieu Wipliez did the trick.

        this is the end of sshd_config which works for current version of bvrde 1.3a (cryptlib 3.3.0)

        Ciphers 3des-cbc,blowfish-cbc,cast128-cbc,arcfour,arcfour128,arcfour256,aes128-cbc,aes192-cbc,aes256-cbc
        MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160
        KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1

         
  • johanax

    johanax - 2017-03-03

    Hi,
    any plans of updating BVRDE with the latest cryplib relaes, I really miss working with this great app.

    Regards Johan

     

Log in to post a comment.

MongoDB Logo MongoDB