openssh on LynxOS issues! - Changes and addons.

[hari sekar]

 --- Damien Miller <djm at mindrot.org> wrote: > On Wed,
10 Oct 2001, hari sekar wrote:
> 
> > Hi,
> > 1.  I use openssh-2.9p2 on a LynxOS i386 system.
> The
> > ssh and scp clients work fine. Even sftp from
> other
> > Linux systems works. But, if I run the sftp client
> in
> > LynxOS to localhost (LynxOS) or remote sshd in
> Linux,
> > the authentication succeeds, prints sftp> prompt
> and
> > then exits. I don't know why this happens. The
> problem
> > is with the sftp client program in LynxOS. Does it
> > work for anyone (sftp client program in LynxOS)?
> 
> No idea here - have you determined whether it is
> sftp or the underlying
> ssh that is exiting.

  ssh client program in LynxOS works fine. It is only
the sftp that exits. Anyway, I attah the debug output
from local sftp program (LynxOS) and remote sshd debug
(Linux).

> 
> > 2.  Does anyone use ssh client with seteuid to
> root?
> > and it still works? or is there a problem with
> LynxOS
> > that seteuid() doesn't work with _POSIX_SAVED_IDS?
> 
> It works on most systems.

   Yeah, it works on Linux and other systems. But do
you mean it works fine on LynxOS system. Have you come
across it? 
Thanks for help,
-Hari.

> 
> -d
> 
> -- 
> | Damien Miller <djm at mindrot.org> \ ``E-mail
> attachments are the poor man's 
> | http://www.mindrot.org          /   distributed
> filesystem'' - Dan Geer
>  

/* sftp client in LynxOS connected to sshd in Linux */


lynx> sftp -v hari at linux
Connecting to 192.168.0.126...
debug1: SSH args "ssh -l hari -v 192.168.0.126 -s
-oForwardX11=no -oForwardAgent=no -oProtocol=2 sftp"
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL
0x0090600f
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating
port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 7 geteuid 7 anon 1
debug1: Connecting to 192.168.0.126 [192.168.0.126]
port 22.
debug1: temporarily_use_uid: 7/2 (e=7)
debug1: restore_uid
debug1: temporarily_use_uid: 7/2 (e=7)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/hari/.ssh/id_rsa type -1
debug1: identity file /home/hari/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software
version OpenSSH_2.9p2
debug1: match: OpenSSH_2.9p2 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 141/256
debug1: bits set: 1040/2049
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '192.168.0.126' is known and matches the
RSA host key.
debug1: Found key in /home/hari/.ssh/known_hosts2:3
debug1: bits set: 1000/2049
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is publickey
debug1: try privkey: /home/hari/.ssh/id_rsa
debug1: try privkey: /home/hari/.ssh/id_dsa
debug1: next auth method to try is password
hari at 192.168.0.126's password:
debug1: ssh-userauth2 successful: method password
debug1: fd 5 setting O_NONBLOCK
debug1: fd 6 IS O_NONBLOCK
debug1: channel 0: new [client-session]
debug1: channel_new: 0
debug1: send channel open 0
debug1: Entering interactive session.
debug1: client_init id 0 arg 0
debug1: Sending subsystem: sftp
debug1: channel 0: open confirm rwindow 0 rmax 16384
sftp>
debug1: channel 0: read<=0 rfd 5 len 0
debug1: channel 0: read failed
debug1: channel 0: input open -> drain
debug1: channel 0: close_read
debug1: channel 0: input: no drain shortcut
debug1: channel 0: ibuf empty
debug1: channel 0: input drain -> closed
debug1: channel 0: send eof
debug1: client_input_channel_req: channel 0 rtype
exit-status reply 0
debug1: channel 0: rcvd eof
debug1: channel 0: output open -> drain
debug1: channel 0: rcvd close
debug1: channel 0: obuf empty
debug1: channel 0: output drain -> closed
debug1: channel 0: close_write
debug1: channel 0: send close
debug1: channel 0: is dead
debug1: channel_free: channel 0: status: The following
connections are open:
  #0 client-session (t4 r0 i8/0 o128/0 fd -1/-1)

debug1: channel_free: channel 0: dettaching channel
user
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes
in 0.1 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0,
stderr 0.0
debug1: Exit status 0
lynx>


/* Remote Redhat 7.0 Linux system running sshd server
*/
linux# sshd -d
debug1: Seeding random number generator
debug1: sshd version OpenSSH_2.9p2
debug1: private host key: #0 type 0 RSA1
debug1: read PEM private key done: type RSA
debug1: private host key: #1 type 1 RSA
debug1: read PEM private key done: type DSA
debug1: private host key: #2 type 2 DSA
socket: Invalid argument
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
Generating 768 bit RSA key.
RSA key generation complete.
debug1: Server will not fork when running in debugging
mode.
Connection from 192.168.0.23 port 1046
debug1: Client protocol version 2.0; client software
version OpenSSH_2.9p2
debug1: match: OpenSSH_2.9p2 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-1.99-OpenSSH_2.9p2
debug1: Rhosts Authentication disabled, originating
port not trusted.
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: dh_gen_key: priv key bits set: 132/256
debug1: bits set: 1000/2049
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: bits set: 1040/2049
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user hari service
ssh-connection method none
debug1: attempt 0 failures 0
debug1: Starting up PAM with username "hari"
debug1: PAM setting rhost to "ists_ibm23"
Failed none for hari from 192.168.0.23 port 1046 ssh2
debug1: userauth-request for user hari service
ssh-connection method password
debug1: attempt 1 failures 1
debug1: PAM Password authentication accepted for user
"hari"
Accepted password for hari from 192.168.0.23 port 1046
ssh2
debug1: Entering interactive session for SSH2.
debug1: server_init_dispatch_20
debug1: server_input_channel_open: ctype session rchan
0 win 65536 max 32768
debug1: input_session_request
debug1: channel 0: new [server-session]
debug1: session_new: init
debug1: session_new: session 0
debug1: session_open: channel 0
debug1: session_open: session 0: link with channel 0
debug1: server_input_channel_open: confirm session
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 channel 0
request subsystem reply 1subsystem request for sftp
debug1: subsystem: exec()
/usr/local/libexec/sftp-server
debug1: PAM establishing creds
debug1: fd 7 setting O_NONBLOCK
debug1: fd 7 IS O_NONBLOCK
debug1: channel 0: rcvd eof
debug1: channel 0: output open -> drain
debug1: channel 0: obuf empty
debug1: channel 0: output drain -> closed
debug1: channel 0: close_write
debug1: Received SIGCHLD.
debug1: session_by_pid: pid 1980
debug1: session_exit_message: session 0 channel 0 pid
1980
debug1: session_exit_message: release channel 0
debug1: session_free: session 0 pid 1980
debug1: channel 0: read<=0 rfd 7 len 0
debug1: channel 0: read failed
debug1: channel 0: input open -> drain
debug1: channel 0: close_read
debug1: channel 0: input: no drain shortcut
debug1: channel 0: ibuf empty
debug1: channel 0: input drain -> closed
debug1: channel 0: send eof
debug1: channel 0: send close
debug1: channel 0: rcvd close
debug1: channel 0: is dead
debug1: channel_free: channel 0: status: The following
connections are open:
  #0 server-session (t4 r0 i8/0 o128/0 fd 7/7)

Connection closed by remote host.
Closing connection to 192.168.0.23
linux#






____________________________________________________________
Do You Yahoo!?
For regular News updates go to http://in.news.yahoo.com