sshd does not exit after scp (hpux 11.00 / ssh 2.1.1p1)

[kengelha at advance-bank.de]

Hello,

Damien Miller wrote:
> Can you turn on debugging at the server end (LogLevel DEBUG) and send
> along the output?

Yes, here it comes:


Jun 19 17:02:33 uxdev05 sshd[3944]: Connection from 185.10.101.174 port 806
Jun 19 17:02:33 uxdev05 sshd[3862]: debug: Forked child 3944.
Jun 19 17:01:02 uxdev05 sshd[3925]: debug: tvp!=NULL kid 0 mili 10
Jun 19 17:02:33 uxdev05  above message repeats 2 times
Jun 19 17:02:33 uxdev05 sshd[3862]: debug: Seeding random number generator.
Jun 19 17:02:33 uxdev05 sshd[3862]: debug: OpenSSL random status is now 1
Jun 19 17:02:33 uxdev05 sshd[3862]: debug: 3 bytes from system calls
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Client protocol version 1.5; client
software version OpenSSH-1.2.2
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Local version string
SSH-1.5-OpenSSH_2.1.1
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Sent 768 bit public key and 1024 bit
host key.
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Encryption type: 3des
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Received session key; encryption
turned on.
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Installing crc compensation attack
detector.
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Starting up PAM with username "root"
Jun 19 17:02:33 uxdev05 sshd[3944]: debug: Attempting authentication for root.
Jun 19 17:02:34 uxdev05 sshd[3862]: debug: 22 bytes from programs
Jun 19 17:02:34 uxdev05 sshd[3862]: debug: OpenSSL random status is now 1
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: PAM Password authentication accepted
for user "root"
Jun 19 17:02:36 uxdev05 sshd[3944]: Accepted password for ROOT from
185.10.101.174 port 806
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: PAM setting rhost to "n4wm1780"
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: session_new: init
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: session_new: session 0
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: Exec command 'scp -t /tmp'
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: PAM establishing creds
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: Entering interactive session.
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: fd 10 setting O_NONBLOCK
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: fd 12 setting O_NONBLOCK
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: server_init_dispatch_13
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: server_init_dispatch_15
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: tvp!=NULL kid 0 mili 10
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: EOF received for stdin.


When killing the remaining process on the client, following is added to the
servers
logfile:

Jun 19 17:03:55 uxdev05 sshd[3944]: Connection closed by remote host.
Jun 19 17:03:55 uxdev05 sshd[3944]: debug: Calling cleanup 0x40015232(0x0)
Jun 19 17:02:36 uxdev05 sshd[3944]: debug: tvp!=NULL kid 0 mili 10
Jun 19 17:03:55 uxdev05  above message repeats 2 times
Jun 19 17:03:55 uxdev05 sshd[3944]: pam_setcred: error Permission denied
Jun 19 17:03:55 uxdev05 sshd[3944]: Cannot delete credentials: Permission denied
Jun 19 17:03:55 uxdev05 sshd[3944]: debug: Calling cleanup 0x400153d2(0x0)
Jun 19 17:03:55 uxdev05 sshd[3944]: debug: Calling cleanup 0x400153e2(0x0)
Jun 19 17:03:55 uxdev05 sshd[3944]: debug: writing PRNG seed to file
/root/.ssh/prng_seed


Thanks,
Klaus