Alexander Panasyuk
2009-May-24 17:57 UTC
OpenSSH_5.2p1. non-vpn login to root account requests TUN interface and cannot exit
Hello! I've configured SSH-VPN between two subnets and it works fine. Option Tunnel=yes in config file is set. The problem I run into is that normal SSH login to root account does not terminate on "exit" command.> ssh root at pigpig> exit ;; screen is cleared but does not return to prompt <ctrl-C> Killed by signal 2. ctrl-D does not work. Running ssh with -vvv has shown that as soon as authentication succeeds ssh requests tun device: debug1: Authentication succeeded (publickey). debug1: Requesting tun unit 2147483647 in mode 1 debug1: sys_tun_open: tunnel mode 1 fd 4 debug2: fd 4 setting O_NONBLOCK debug3: fd 4 is O_NONBLOCK debug1: channel 0: new [tun] debug1: channel 1: new [client-session] debug3: ssh_session2_open: channel_new: 1 debug2: channel 1: send open and after I exit from shell can not close it: debug2: channel 1: rcvd eof debug2: channel 1: output open -> drain debug2: channel 1: obuf empty debug2: channel 1: close_write debug2: channel 1: output drain -> closed debug1: client_input_channel_req: channel 1 rtype exit-status reply 0 debug2: channel 1: rcvd close debug2: channel 1: close_read debug2: channel 1: input open -> closed debug3: channel 1: will not send data after close debug2: channel 1: almost dead debug2: channel 1: gc: notify user debug2: channel 1: gc: user detached debug2: channel 1: send close debug2: channel 1: is dead debug2: channel 1: garbage collecting debug1: channel 1: free: client-session, nchannels 2 debug3: channel 1: status: The following connections are open: #0 tun (t4 r0 i0/0 o0/0 fd 4/4 cfd -1) #1 client-session (t4 r1 i3/0 o3/0 fd -1/-1 cfd -1) debug3: channel 1: close_fds r -1 w -1 e 7 c -1 Running ssh -oTunnel=no root at pig does not help either. Commenting out Tunnel=yes in configuration file does work. I wonder why TUN device is requested when I am not asking for SSH-VPN tunneling, why it can not be closed on exit (nothing is using it) and why -oTunnel=no option does not work. Thanks, Alex.