thr3ads.net - openssh unix dev - OpenSSH 3.4p1 on SourceMage client ssh fails [Jul 2002]

If this information is useful, please help other people find it:
Share via:

Damien Mascord

2002-Jul-27 11:38 UTC

OpenSSH 3.4p1 on SourceMage client ssh fails

Hi guys,

I have a OpenSSH 3.4p1 installation on a SourceMage box, and I am trying to 
connect to a OpenSSH 3.3p1 installation on a RedHat 7.x box and any other 
machine.

The client fails with a "Host key verification failed."

Any other client connects correctly to the RedHat box, and any other server 
that I try to connect to from the SourceMage box fails with the same error 
message.  The output of the debug for ssh client and ssh are as attached.

I can connect to the SourceMage box fine from any client, though cannot 
connect outwards... any ideas?

Damien
---------------------------

The configure that I used for OpenSSH 3.4p1 on the SourceMage box is as 
follows:
./configure  --prefix=/usr            \
                --sysconfdir=/etc/ssh    \
                --with-md5-passwords     \
                --mandir=/usr/share/man  \

I am also using OpenSSL 0.9.6d.

$ openssl version
OpenSSL 0.9.6d 9 May 2002

The debug output on the 3.3p1 RedHat box:
sshd -d -d -d -p 4022
debug1: sshd version OpenSSH_3.3
debug1: private host key: #0 type 0 RSA1
debug3: Not a RSA1 key file /etc/ssh/ssh_host_rsa_key.
debug1: read PEM private key done: type RSA
debug1: private host key: #1 type 1 RSA
debug3: Not a RSA1 key file /etc/ssh/ssh_host_dsa_key.
debug1: read PEM private key done: type DSA
debug1: private host key: #2 type 2 DSA
socket: Address family not supported by protocol
debug1: Bind to port 4022 on 0.0.0.0.
Server listening on 0.0.0.0 port 4022.
Generating 768 bit RSA key.
RSA key generation complete.
debug1: Server will not fork when running in debugging mode.
Connection from 218.186.116.42 port 36256
debug1: Client protocol version 2.0; client software version OpenSSH_3.4p1
debug1: match: OpenSSH_3.4p1 pat OpenSSH*
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-1.99-OpenSSH_3.3
debug2: Network child is on pid 29415
debug3: preauth child monitor started
debug3: mm_request_receive entering
debug3: privsep user:group 74:74
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none
debug2: kex_parse_kexinit: none
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug3: mm_request_send entering: type 0
debug3: mm_choose_dh: waiting for MONITOR_ANS_MODULI
debug3: mm_request_receive_expect entering: type 1
debug3: mm_request_receive entering
debug3: monitor_read: checking request 0
debug3: mm_answer_moduli: got parameters: 1024 2048 8192
debug3: mm_request_send entering: type 1
debug2: monitor_read: 0 used once, disabling now
debug3: mm_request_receive entering
debug3: mm_choose_dh: remaining 0
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: dh_gen_key: priv key bits set: 132/256
debug1: bits set: 1566/3191
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: bits set: 1626/3191
debug3: mm_key_sign entering
debug3: mm_request_send entering: type 4
debug3: monitor_read: checking request 4
debug3: mm_answer_sign
debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN
debug3: mm_request_receive_expect entering: type 5
debug3: mm_request_receive entering
debug3: mm_answer_sign: signature 0x80a09a0(143)
debug3: mm_request_send entering: type 5
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug2: monitor_read: 4 used once, disabling now
debug3: mm_request_receive entering
Connection closed by 218.186.116.42
debug1: Calling cleanup 0x806e1a0(0x0)
debug1: Calling cleanup 0x806e1a0(0x0)


For the 3.3p1 Redhat box:
ssh -v -v -v tusker@<hostname> -p 4022
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090604f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to grim.optus.nu [211.28.94.42] port 4022.
debug1: Connection established.
debug1: identity file /home/tusker/.ssh/identity type -1
debug1: identity file /home/tusker/.ssh/id_rsa type -1
debug1: identity file /home/tusker/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.3
debug1: match: OpenSSH_3.3 pat OpenSSH*
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.4p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none
debug2: kex_parse_kexinit: none
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: 
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc
at lysator.liu.se
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: 
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160 at
openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 131/256
debug1: bits set: 1626/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug3: check_host_in_hostfile: filename /home/tusker/.ssh/known_hosts
debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
debug3: check_host_in_hostfile: filename /home/tusker/.ssh/known_hosts
debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
Host key verification failed.
debug1: Calling cleanup 0x8068fb0(0x0)



For a 1.2.26 SSH box:
ssh -v -v -v tusker@<hostname>
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090604f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to disorder.com.au [216.94.9.84] port 22.
debug1: Connection established.
debug1: identity file /home/tusker/.ssh/identity type -1
debug1: identity file /home/tusker/.ssh/id_rsa type -1
debug1: identity file /home/tusker/.ssh/id_dsa type -1
debug1: Remote protocol version 1.5, remote software version 1.2.26
debug1: match: 1.2.26 pat 1.2.1*,1.2.2*,1.2.3*
debug1: Local version string SSH-1.5-OpenSSH_3.4p1
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug3: check_host_in_hostfile: filename /home/tusker/.ssh/known_hosts
debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
debug3: check_host_in_hostfile: filename /home/tusker/.ssh/known_hosts
debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
Host key verification failed.
debug1: Calling cleanup 0x8068fb0(0x0)

Gert Doering

2002-Jul-28 10:02 UTC

head link

OpenSSH 3.4p1 on SourceMage client ssh fails

Hi,

On Sat, Jul 27, 2002 at 07:38:28PM +0800, Damien Mascord
wrote:> I have a OpenSSH 3.4p1 installation on a SourceMage box, and I am trying to
> connect to a OpenSSH 3.3p1 installation on a RedHat 7.x box and any other 
> machine.
> 
> The client fails with a "Host key verification failed."

Damien Mascord

2002-Jul-28 13:47 UTC

head link

OpenSSH 3.4p1 on SourceMage client ssh fails

Gert,

ahh!

non world writeable /dev/tty* was the issue...

Thanks for the apt answer... any reason why this wasn't picked up on the 
debug or verbose??

Damien

At 12:02 PM 28/07/2002 +0200, Gert Doering wrote:>Hi,
>
>On Sat, Jul 27, 2002 at 07:38:28PM +0800, Damien Mascord wrote:
> > I have a OpenSSH 3.4p1 installation on a SourceMage box, and I am 
> trying to
> > connect to a OpenSSH 3.3p1 installation on a RedHat 7.x box and any
other
> > machine.
> >
> > The client fails with a "Host key verification failed."
>
> >From the debug, it seems as if the client is not asking you to accept
an
>(yet-unknown) server key, but just checking all possible locations, not
>finding the key, and giving up.
>
>I have seen a similar effect on a system that had a /dev/tty entry that
>was not world-writeable (thus the ssh client couldn't open it to ask for
>a confirmation).
>
>The effect will also happen if you have "StrictHostKeyChecking
yes" in
>ssh_config - set that to "ask", otherwise it will fail if the key
isn't
>known in advance.
>
>gert
>--
>USENET is *not* the non-clickable part of WWW!
> 
>//www.muc.de/~gert/
>Gert Doering - Munich, Germany                             gert at
greenie.muc.de
>fax: +49-89-35655025                        gert.doering at
physik.tu-muenchen.de
>_______________________________________________
>openssh-unix-dev at mindrot.org mailing list
>http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

Reasonably Related Threads

Search for more reasonably related threads

openssh unix dev - Jul 2002 - OpenSSH 3.4p1 on SourceMage client ssh fails

OpenSSH 3.4p1 on SourceMage client ssh fails

OpenSSH 3.4p1 on SourceMage client ssh fails

OpenSSH 3.4p1 on SourceMage client ssh fails

Reasonably Related Threads