ssh_exchange_identification: Connection closed by remote host

[Alfred Hovdestad]

This has taken far too long to get to you, and I apologize for that.

There are four attachments included:

client.working
client.notworking
server.working
server.notworking

I am running RedHat 9.0 on both systems with all of the latest patches 
from RedHat.  The current rpm for openssh is openssh-3.5p1-6.9.  I have 
PAM configured to use kerberos for password authentication.  The only 
difference in the two scenarios is the Kerberos server.  We have a two 
kerberos servers, one a Windows Domain Controller and the other a Sun.

If I use the Windows DC for Kerberos authentication, I can login at the 
console, I can generate a kerberos ticket (kinit), but I cannot login 
with ssh.

If I use the Sun for kerberos authentication, I can login at the 
console, I can generate a kerberos ticket (kinit), and I can login with ssh.

If I downgrade to the previous rpm from RedHat (openssh-3.5p1-6), I can 
login with ssh to the server.  If it would help, I can also generate the 
log file for the previous version.

If you require more information, please let me know.

     Alfred Hovdestad
     System Administrator
     University of Saskatchewan
     RHCE: 807200142604340


Darren Tucker wrote:
> Alfred Hovdestad wrote:
> 
>>I am running RedHat 9.0 with openssh 3.5.  I have tried connecting from
>>a RedHat 8.0 box running openshh 3.4 and a tru64 box also with openssh
>>3.4, with the same results:  I can login to the new account, but not to
>>my existing account.
> 
> 
> Perhaps your password are expiring?
> 
> 
>>The problem is not with tcp wrappers, as I can login to one account, but
>>not another.  I have tried deleting my ssh keys, my host keys, and
>>rebooting my system, none of which has made any difference.
>>
>>Is there anything else I can check?  I can send any log information that
>>you need.
> 
> 
> Yes, you need to post the *server* side debugging, ie:
> 
> /path/to/sshd -ddd -p 2022
> 
> then in another window:
> 
> ssh -p 2022 servername
> 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: client.working
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030906/eb0498fc/attachment.ksh 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: client.notworking
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030906/eb0498fc/attachment-0001.ksh 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: server.working
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030906/eb0498fc/attachment-0002.ksh 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: server.notworking
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20030906/eb0498fc/attachment-0003.ksh