trouble logging out when using protocol version 2

[Joe Wells]

Dear OpenSSH gurus,

My machine is running Red Hat Linux 6.1 and has installed all of the
6.binary rpms generated from the source rpms openssh-2.2.0p1-2.src.rpm
6.and openssl-0.9.5a-3.src.rpm.

When I use protocol version 2 (by specifying "Protocol 2,1" in
~/.ssh/config), I can establish connections properly, but they do not
shut down properly.  When I run a remote command by "ssh REMOTE-HOST
REMOTE-COMMAND", I see the output from REMOTE-COMMAND and then ssh
hangs and does nothing forever.  I can interrupt it by pressing
Control-C (the "intr" character).  I have enclosed a script of running
"ssh -v REMOTE-HOST REMOTE-COMMAND" below to illustrate this.  The
last 5 lines of this script happen only after I press Control-C.  When
I create a remote login session with "ssh REMOTE-HOST", ssh hangs
after I try to log out.  For about thirty seconds, Control-C and
Control-\ (the "quit" character) only cause "^C" and "^\" to be
echoed.  Then pressing either will successfully interrupt ssh.

Any suggestions?

-- 
Joe Wells
http://www.cee.hw.ac.uk/~jbw/

----------------------------------------------------------------------
(jbw at moon) 6:41:35pm [~] > ssh -v csb.bu.edu id
SSH Version OpenSSH_2.2.0p1, protocol versions 1.5/2.0.
Compiled with SSL (0x0090581f).
debug: Reading configuration data /home/jbw/.ssh/config
debug: Applying options for csb.bu.edu
debug: Reading configuration data /etc/ssh/ssh_config
debug: Seeding random number generator
debug: ssh_connect: getuid 500 geteuid 0 anon 1
YPBINDPROC_DOMAIN: Domain not bound
debug: Connecting to csb.bu.edu [128.197.10.4] port 22.
debug: Connection established.
debug: Remote protocol version 1.99, remote software version 2.0.13 (non-commercial)
datafellows: 2.0.13 (non-commercial)
Enabling compatibility mode for protocol 2.0
debug: Local version string SSH-2.0-OpenSSH_2.2.0p1
debug: Seeding random number generator
debug: send KEXINIT
debug: done
debug: wait KEXINIT
debug: got kexinit: diffie-hellman-group1-sha1
debug: got kexinit: ssh-dss
debug: got kexinit: 3des-cbc,blowfish-cbc,twofish-cbc,arcfour,none
debug: got kexinit: 3des-cbc,blowfish-cbc,twofish-cbc,arcfour,none
debug: got kexinit: hmac-md5,md5-8,none
debug: got kexinit: hmac-md5,md5-8,none
debug: got kexinit: none,zlib
debug: got kexinit: none,zlib
debug: got kexinit: 
debug: got kexinit: 
debug: first kex follow: 0 
debug: reserved: 0 
debug: done
debug: kex: server->client 3des-cbc hmac-md5 zlib
debug: kex: client->server 3des-cbc hmac-md5 zlib
debug: Sending SSH2_MSG_KEXDH_INIT.
debug: bits set: 515/1024
debug: Wait SSH2_MSG_KEXDH_REPLY.
debug: Got SSH2_MSG_KEXDH_REPLY.
debug: Host 'csb.bu.edu' is known and matches the DSA host key.
debug: bits set: 499/1024
debug: len 40 datafellows 15
debug: dsa_verify: signature correct
debug: Wait SSH2_MSG_NEWKEYS.
debug: Enabling compression at level 6.
debug: GOT SSH2_MSG_NEWKEYS.
debug: send SSH2_MSG_NEWKEYS.
debug: done: send SSH2_MSG_NEWKEYS.
debug: done: KEX2.
debug: send SSH2_MSG_SERVICE_REQUEST
debug: buggy server: service_accept w/o service
debug: got SSH2_MSG_SERVICE_ACCEPT
debug: authentications that can continue: publickey,password
debug: try pubkey: /home/jbw/.ssh/id_dsa
debug: read DSA private key done
debug: sig size 20 20
debug: datafellows
debug: ssh-userauth2 successfull
debug: no set_nonblock for tty fd 4
debug: no set_nonblock for tty fd 5
debug: no set_nonblock for tty fd 6
debug: channel 0: new [client-session]
debug: send channel open 0
debug: Entering interactive session.
debug: callback start
debug: client_init id 0 arg 0
debug: Sending command: id
debug: client_set_session_ident: id 0
debug: callback done
debug: channel 0: open confirm rwindow 10000 rmax 32768
uid=3040(jbw) gid=1012(grad3) groups=1012(grad3),895(techreports),3467(kfoury),43743(intersectuals),2015(jbwfdk),3056(church-admin),43742(church)
debug: compress outgoing: raw data 627, compressed 597, factor 0.95
debug: compress incoming: raw data 198, compressed 171, factor 0.86
Killed by signal 2.
debug: Calling cleanup 0x8056630(0x0)
debug: Calling cleanup 0x805c0d0(0x0)