Re: [Toolserver-l] SSH login issue

[River Tarnell]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jimmy Xu:
> It turns out that Toolserver doesn't support compression. I commented
> out "Compression yes" in my config and it started to work.

This should be fixed now.

The problem was that sshd does a chroot() in the privsep child, which 
handles communication with the client.  However, Solaris ld.so does 
lazy-loading of shared libraries by default, and sshd doesn't require 
zlib until after the chroot.  Since there is no zlib in the chroot 
directory, it failed to load:

ld.so.1: sshd: fatal: libz.so.1: open failed: No such file or directory

I have re-built sshd with lazy-loading disabled, and compression (ssh 
- -C) seems to be working now.

- river.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (SunOS)

iEYEARECAAYFAk4RuNIACgkQIXd7fCuc5vJ8NwCggwox2UqXzLqh+MaKvFnvgSTc
P3MAoIiKGJ8Kb0nUqkTrkNv02MZx80lR
=Vbz/
-END PGP SIGNATURE-

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

Hi guys,

It turns out that Toolserver doesn't support compression. I commented
out "Compression yes" in my config and it started to work.

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

Hi,

Using the new key in JIRA I still got the same error. I'm connecting from
50.93.195.17*. However FYI I did SSH'd to that host to try so this wouldn't
seem to be a firewall or something.

2011/06/20 22:14 "DaB." :
> > ssh -i privatekey.rsa  platoni...@toolserver.org
>
> please try that on your own server, not on the TS.
>

I did got denied and falled-back to the "Password:" prompt.

-- 
Jimmy Xu
___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[DaB.]

Hello,
At Tuesday 21 June 2011 00:11:38 DaB. wrote:
> Try connecting to my account:
> 
> wget http://toolserver.org/~platonides/sandbox/privatekey.rsa
> chmod 700 privatekey.rsa
> ssh -i privatekey.rsa  platoni...@toolserver.org

please try that on your own server, not on the TS.

Sincerly,
DaB.

-- 
Userpage: [[:w:de:User:DaB.]] — PGP: 2B255885


signature.asc
Description: This is a digitally signed message part.
___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Platonides]

Jimmy Xu wrote:
> On Sat, Jun 18, 2011 at 6:35 PM, Andre Koopal  wrote:
>> Silly question, as it seems the key is accepted, did you change anything
>> to your dotfiles? Maybe you can ask the roots to move your .bashrc and
>> .bash_login out of the way?
>
> No, I don't recall any changes to my dotfiles, including permission. Since
> it didn't reach the "interactive session" period, I don't believe .bash* is
> related.
>
> Still, any hint would be appreciated. Still unable to access my account
> by now.

I have no problem with the same ssh version as you.
Try connecting to my account:

wget http://toolserver.org/~platonides/sandbox/privatekey.rsa
chmod 700 privatekey.rsa
ssh -i privatekey.rsa  platoni...@toolserver.org


___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

On Mon, Jun 20, 2011 at 8:41 AM, DaB.  wrote:
> please generate a new (temporary) ssh-key-pair and submit the public-part to
> JIRA. Let us look if the key is the problem in some way or the other.
>

Done, .

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[DaB.]

Hello,
At Monday 20 June 2011 10:40:00 DaB. wrote:
> Still, any hint would be appreciated. Still unable to access my account
> by now.

please generate a new (temporary) ssh-key-pair and submit the public-part to 
JIRA. Let us look if the key is the problem in some way or the other.

Sincerly,
DaB.

-- 
Userpage: [[:w:de:User:DaB.]] — PGP: 2B255885


signature.asc
Description: This is a digitally signed message part.
___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

On Sat, Jun 18, 2011 at 6:35 PM, Andre Koopal  wrote:
> Silly question, as it seems the key is accepted, did you change anything
> to your dotfiles? Maybe you can ask the roots to move your .bashrc and
> .bash_login out of the way?
>

No, I don't recall any changes to my dotfiles, including permission. Since
it didn't reach the "interactive session" period, I don't believe .bash* is
related.

Still, any hint would be appreciated. Still unable to access my account
by now.

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Andre Koopal]

On Sat, Jun 18, 2011 at 05:01:52PM +, Jimmy Xu wrote:
> On Sat, Jun 18, 2011 at 3:34 PM, DaB.  wrote:
> > the auth-log on nightshade tells me, that the publickey from you was 
> > accepted.
> > So I doubt that the problem is on our side. Your account is also not 
> > expired.
> >
> 
> http://pastebin.com/zQnTaDze Full -vvv log and a timestamp.
> 
> It did say "accepts key" though. The traffic is encrypted so tcpdump seems
> not that helping.
> 
Silly question, as it seems the key is accepted, did you change anything
to your dotfiles? Maybe you can ask the roots to move your .bashrc and
.bash_login out of the way?

Regards,

Andre

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

On Sat, Jun 18, 2011 at 3:34 PM, DaB.  wrote:
> the auth-log on nightshade tells me, that the publickey from you was accepted.
> So I doubt that the problem is on our side. Your account is also not expired.
>

http://pastebin.com/zQnTaDze Full -vvv log and a timestamp.

It did say "accepts key" though. The traffic is encrypted so tcpdump seems
not that helping.

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

On Sat, Jun 18, 2011 at 3:34 PM, DaB.  wrote:
> the auth-log on nightshade tells me, that the publickey from you was accepted.
> So I doubt that the problem is on our side. Your account is also not expired.
>

Yeah that's the weirdest thing. I'm able to login to my VPS or other SSH hosts.


On Sat, Jun 18, 2011 at 3:46 PM, MZMcBride  wrote:
> I don't think you've pasted the exact command you're running. That might
> help debug.

Just some ordinary thing you use everyday :)
jimmy@vangogh:~$ ssh -v willow.toolserver.org

>> Had someone add my pubkey to his authorized_keys but the problem persists.
>
> I don't know what this means.

I asked someone else to put my id_rsa.pub into his authorized_keys so that I
can try to login to his account. Failed anyway,

> It seems to me that your whole home directory (/home/jimmy/) has funky
> permissions.

Really don't know why this would happen. Anyway filed a ticked.

> Have you tried logging in from elsewhere?

Yup, tried three hosts and the results are identical.

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[MZMcBride]

Jimmy Xu wrote:
> Recently I'm experiencing some problems trying to login to toolserver.
> The SSH log says:
> 
> [...]
> debug1: Authentications that can continue:
> publickey,password,keyboard-interactive,hostbased
> debug1: Next authentication method: publickey
> debug1: Offering RSA public key: /home/jimmy/.ssh/id_rsa
> debug1: Server accepts key: pkalg ssh-rsa blen 277
> Connection closed by 2620:0:862:101::2:4
> jimmy@vangogh:~$

I don't think you've pasted the exact command you're running. That might
help debug.

> Had someone add my pubkey to his authorized_keys but the problem persists.

I don't know what this means.

It seems to me that your whole home directory (/home/jimmy/) has funky
permissions. My guess is that this is the cause of your problems. I would
suggest filing a ticket in JIRA () to get a
Toolserver root to investigate your problem.

DaB. has said that your account isn't expired. That was another guess of
mine. The last guess I had was that there's something blocking SSH access on
your local network. Have you tried logging in from elsewhere?

MZMcBride



___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[DaB.]

Hello,
At Saturday 18 June 2011 17:33:34 DaB. wrote:
> It says "connection closed" instead of "reset". Also tcpdump suggested a
> normal FIN-style ending. :(

the auth-log on nightshade tells me, that the publickey from you was accepted. 
So I doubt that the problem is on our side. Your account is also not expired.

Sincerly,
DaB.

-- 
Userpage: [[:w:de:User:DaB.]] — PGP: 2B255885


signature.asc
Description: This is a digitally signed message part.
___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Jimmy Xu]

On Sat, Jun 18, 2011 at 2:01 PM, Platonides  wrote:
> Does it also fail if you connect by IPv4 ? (use the switch -4)

Yup, also failed to connect to willow or wolfsbane.

On Sat, Jun 18, 2011 at 2:36 PM, Brownout  wrote:
> There is a known OpenSSH bug that may reset an SSH handshake when the

It says "connection closed" instead of "reset". Also tcpdump suggested a
normal FIN-style ending. :(

Forgot to mention that my username on toolserver is ~jimmy.

jimmy@vangogh:~$ ssh -v
OpenSSH_5.8p2, OpenSSL 1.0.0d 8 Feb 2011

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Brownout]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2011-06-18 16:13, Darkdadaah wrote:
> I had the same kind of problem (same Connection Closed at the same
> step) earlier this month and I solved it by removing a line in the
> .ssh/config file of my client (maybe compression). If you have this
> file, check if you can connect without it (backed up) and isolate the
> buggy line.

There is a known OpenSSH bug that may reset an SSH handshake when the
client advertise too many algorithms, see
https://bugs.launchpad.net/debian/+source/openssh/+bug/708493
you can try the workarounds summarized in comment #19,
- -- 
  Brownout

http://it.wikipedia.org/wiki/Utente:Brownout

PGP key fingerprint = BE55 16AD FED1 0455 ADBE  C375 AFD1 16B3 0670 9C59
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREKAAYFAk38t9cACgkQHemT/Rh9ZLIKXQEAmeaFd4krXNbtsqH3x/UsGmr2
O436bpiwD+yU3Xltx9UA/AggQC9Z/lorLo1LuKCvW2QQ2x8fd4M6oPBT14A3EkfA
=CrIn
-END PGP SIGNATURE-

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Darkdadaah]

Hi,
I had the same kind of problem (same Connection Closed at the same
step) earlier this month and I solved it by removing a line in the
.ssh/config file of my client (maybe compression). If you have this
file, check if you can connect without it (backed up) and isolate the
buggy line.

2011/6/18 Platonides :
> Jimmy Xu wrote:
>> Hi,
>>
>> Recently I'm experiencing some problems trying to login to toolserver.
>> The SSH log says:
>>
>> [...]
>> debug1: Authentications that can continue:
>> publickey,password,keyboard-interactive,hostbased
>> debug1: Next authentication method: publickey
>> debug1: Offering RSA public key: /home/jimmy/.ssh/id_rsa
>> debug1: Server accepts key: pkalg ssh-rsa blen 277
>> Connection closed by 2620:0:862:101::2:4
>> jimmy@vangogh:~$
>>
>> Had someone add my pubkey to his authorized_keys but the problem persists.
>>
>> Anyone can give me a hint? Thanks.
>
> Does it also fail if you connect by IPv4 ? (use the switch -4)
>
> ___
> Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
> https://lists.wikimedia.org/mailman/listinfo/toolserver-l
> Posting guidelines for this list: 
> https://wiki.toolserver.org/view/Mailing_list_etiquette
>

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Re: [Toolserver-l] SSH login issue

[Platonides]

Jimmy Xu wrote:
> Hi,
>
> Recently I'm experiencing some problems trying to login to toolserver.
> The SSH log says:
>
> [...]
> debug1: Authentications that can continue:
> publickey,password,keyboard-interactive,hostbased
> debug1: Next authentication method: publickey
> debug1: Offering RSA public key: /home/jimmy/.ssh/id_rsa
> debug1: Server accepts key: pkalg ssh-rsa blen 277
> Connection closed by 2620:0:862:101::2:4
> jimmy@vangogh:~$
>
> Had someone add my pubkey to his authorized_keys but the problem persists.
>
> Anyone can give me a hint? Thanks.

Does it also fail if you connect by IPv4 ? (use the switch -4)

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

[Toolserver-l] SSH login issue

[Jimmy Xu]

Hi,

Recently I'm experiencing some problems trying to login to toolserver.
The SSH log says:

[...]
debug1: Authentications that can continue:
publickey,password,keyboard-interactive,hostbased
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/jimmy/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
Connection closed by 2620:0:862:101::2:4
jimmy@vangogh:~$

Had someone add my pubkey to his authorized_keys but the problem persists.

Anyone can give me a hint? Thanks.

-- 
Jimmy Xu

___
Toolserver-l mailing list (Toolserver-l@lists.wikimedia.org)
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette