openssh bugs - Mar 2005 - [Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II

http://bugzilla.mindrot.org/show_bug.cgi?id=990

           Summary: OpenSSH cannot connect to an IBM RSA (Remote Supervisor
                    Adaptor) II
           Product: Portable OpenSSH
           Version: 3.9p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: ssh
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: mkatz at combinenet.com


OpenSSH 3.9p1 on Linux, and whatever the most current verion on Mac OS X is (I
don't have my iBook with me currently, but it is having the same problem)
will
not connect correctly to an IBM Remote Supervisor Adapter II card.  The card
runs some type of embedded software and provides an SSH connection to the
command-line interface to do nifty things on your IBM xSeries machine like power
off/on, tempature monitoring and the like.  The RSA will accept the username and
password,  but then close the connection instead of offering the shell.  I will
attach a copy of the debug trace.  Could this be a client-server version
negotiation issue?

Thanks.

Moshe Hyzon



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From mkatz at combinenet.com  2005-03-03 10:33
-------
Created an attachment (id=840)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=840&action=view)
Email sent to IBM containing a debug (-v -v -v) dump of failed connection




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990


mkatz at combinenet.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
    Attachment #840|Email sent to IBM containing|Debug (-v -v -v) dump of
        description|a debug (-v -v -v) dump of  |failed connection
                   |failed connection           |






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From mkatz at combinenet.com  2005-03-03 10:38
-------
I forgot to mention that PuTTY under windows (version 0.56) works fine
connectiong to the RSAII.  



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From dtucker at zip.com.au  2005-03-03 16:12 -------
(From update of attachment 840)
>debug2: channel 0: open confirm rwindow 65536 rmax 16384
>debug1: channel 0: free: client-session, nchannels 1
>debug3: channel 0: status: The following connections are open:
>  #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cfd -1)
>debug3: channel 0: close_fds r 4 w 5 e 6 c -1
>Connection to dgsq-asm1 closed by remote host.
>Connection to dgsq-asm1 closed.
This looks like the server is exitting immediately (crashing, perhaps?)  Is
there any way to check the server's log or run it in debug mode?

A couple of things you can try (but probably won't help):
 * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")
 * disable pty allocation ("ssh -T yourserver")

Failing that you may have to ask IBM.
>I've compared this to a successful login to another machine and the only
difference is the lines
>debug2: channel 0: open confirm rwindow 0 rmax 32768
>debug2: channel 0: rcvd adjust 131072
That's just the receive window size and maximum (ssh) packet size, those can
be
different for different implementations.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From dtucker at zip.com.au  2005-03-03 16:15 -------
(In reply to comment #2)
> I forgot to mention that PuTTY under windows (version 0.56) works fine
> connectiong to the RSAII.  
Could you turn on packet debugging in PuTTY, log a connection and attach the
log?  (your password may be in the log so make sure you delete it it before
uploading).

It may not help either but comparing it with the OpenSSH log may provide a clue.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From mkatz at combinenet.com  2005-03-04 04:03
-------
Created an attachment (id=843)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=843&action=view)
PuTTY packet log

Here is a successful connection via PuTTY



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990


mkatz at combinenet.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
    Attachment #843|application/octet-stream    |text/plain
          mime type|                            |






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From mkatz at combinenet.com  2005-03-04 04:37
-------
(In reply to comment #3)
> This looks like the server is exitting immediately (crashing, perhaps?)  Is
> there any way to check the server's log or run it in debug mode?
> A couple of things you can try (but probably won't help):
>  * disable agent forwarding: ("ssh -o ForwardAgent=no
yourserver")
That did it!  APparently, the IBM server doesn't like agent forwarding. :-/
Well, I guess it's their problem, then huh?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990





------- Additional Comments From mkatz at combinenet.com  2005-03-04 04:48
-------
(In reply to comment #6)
> (In reply to comment #3)
> > This looks like the server is exitting immediately (crashing,
perhaps?)  Is
> > there any way to check the server's log or run it in debug mode?
> > A couple of things you can try (but probably won't help):
> >  * disable agent forwarding: ("ssh -o ForwardAgent=no
yourserver")
> That did it!  APparently, the IBM server doesn't like agent forwarding.
:-/
> Well, I guess it's their problem, then huh?

Also, X11Forwarding needs to be off as well.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=990


dtucker at zip.com.au changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From dtucker at zip.com.au  2005-03-06 22:20 -------
(In reply to comment #6)
> > ("ssh -o ForwardAgent=no yourserver")
> 
> That did it!
Wow, that was a long shot.
> Apparently, the IBM server doesn't like agent forwarding. :-/  
> Well, I guess it's their problem, then huh?
Sure looks like that, and without some kind of debugging from the server, IBM is
the only one who can verify it.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.