Re: ssh from FreeBSD to Solaris

From: Victor Sudakov (2:5020/400)
To: All
Date: 2008-03-05T07:00:50Z
Area: RU.UNIX.SOLARIS
From: Victor Sudakov <vas@mpeks.tomsk.su>

Victor Sudakov wrote:

[dd]

> II. А вот с FreeBSD на Solaris 9 не удаётся заставить. Вот что происходит:

> debug1: Authentications that can continue: gssapi-keyex,gssapi-with-mic,publicke
> y,password,keyboard-interactive
> debug1: Next authentication method: gssapi-with-mic
> debug2: we sent a gssapi-with-mic packet, wait for reply
> debug1: Delegating credentials
> Connection closed by 172.16.138.114
> $ 

> Почему Solaris 9 закрывает соединение - непонятно. Где у него хотя бы
> лог sshd пишется? /var/adm/messages пуст.

Запустил sshd в режиме дебага, стало видно как он падает. Посоветуйте
что-нибудь pls. Может патчи какие-то установить надо.

# 
# !!
/usr/lib/ssh/sshd -ddd -p 4488
debug1: sshd version Sun_SSH_1.1
debug3: Not a RSA1 key file /etc/ssh/ssh_host_rsa_key.
debug1: read PEM private key done: type RSA
debug1: private host key: #0 type 1 RSA
debug3: Not a RSA1 key file /etc/ssh/ssh_host_dsa_key.
debug1: read PEM private key done: type DSA
debug1: private host key: #1 type 2 DSA
debug1: Bind to port 4488 on ::.
Server listening on :: port 4488.
debug1: Server will not fork when running in debugging mode.
Connection from 172.16.138.125 port 64069
debug1: Client protocol version 2.0; client software version OpenSSH_3.8.1p1 FreeBSD-20060930
debug1: match: OpenSSH_3.8.1p1 FreeBSD-20060930 pat OpenSSH_3.6*,OpenSSH_3.7*,OpenSSH_3.8*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.1
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc
debug2: kex_parse_kexinit: aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug2: kex_parse_kexinit: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: GSS-API Mechanism encoded as toWM5Slw5Ew8Mqkay+al2g==
debug1: SSH2_MSG_KEXINIT sent
debug3: kex_reset_dispatch -- should we dispatch_set(KEXINIT) here? 0 && !0
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc
debug2: kex_parse_kexinit: aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug2: kex_parse_kexinit: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-dss,ssh-rsa
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: Peer sent proposed langtags, ctos: 
debug1: Peer sent proposed langtags, stoc: 
debug1: We proposed langtags, ctos: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug1: We proposed langtags, stoc: hi-IN,ru,ru-RU,tr-TR,bg-BG,et,et-EE,hr-HR,lt,lt-LT,lv,lv-LV,mk-MK,nr,ro-RO,sh-BA,sl-SI,sq-AL,sr-SP,sr-YU,th,th-TH,tr,i-default
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: dh_gen_key: priv key bits set: 122/256
debug1: bits set: 495/1024
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: bits set: 507/1024
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug2: kex_derive_keys
debug3: kex_reset_dispatch -- should we dispatch_set(KEXINIT) here? 0 && !0
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user sudakov service ssh-connection method none
debug1: attempt 0 initial attempt 0 failures 0 initial failures 0
debug2: input_userauth_request: setting up authctxt for sudakov
debug2: input_userauth_request: try method none
Failed none for sudakov from 172.16.138.125 port 64069 ssh2
debug1: userauth-request for user sudakov service ssh-connection method gssapi-with-mic
debug1: attempt 1 initial attempt 0 failures 1 initial failures 0
debug2: input_userauth_request: try method gssapi-with-mic
debug1: Client offered gssapi userauth with { 1 2 840 113554 1 2 2 } (supported)
Bus error (core dumped)
# 
# 
# 


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/
--- ifmail v.2.15dev5.4
 * Origin: AO "Svyaztransneft", SibPTUS (2:5020/400)
SEEN-BY: 236/100 450/1024 461/640 469/999 4625/8 5000/5000 5006/1 5007/1
SEEN-BY: 5010/70 5011/13 5015/28 5019/40 5020/175 194 400 545 902 1922 2238
SEEN-BY: 5020/4441 5021/29 5025/3 5030/1080 1957 5035/38 5036/1 5045/7 5051/15
SEEN-BY: 5054/1 4 8 9 28 37 5060/88 5061/15 120 5062/10 5064/7 5066/18 5075/5
SEEN-BY: 5085/13 5093/57 5095/20 5096/18 6001/10 6009/1
PATH: 5020/400 545 5054/1 37