Re: wierd ssh failure

From: Bruce Albrecht (bruce@zuhause.mn.org)
Date: 01/26/01


From: Bruce Albrecht <bruce@zuhause.mn.org>
Date: Fri, 26 Jan 2001 14:37:43 -0600 (CST)
To: Dan Debertin <airboss@bitstream.net>

Dan Debertin writes:
> On Fri, 26 Jan 2001, Bruce Albrecht wrote:
> > I forgot to mention that I'm running 4.2-stable (circa last week).
> > When I ran strings on sshd, I couldn't find the message that I got
> > from ssh, which is why I'm wondering if this was a temporary routing
> > error, or an attempt to do a man-in-the-middle attack.
>
> Run strings on your client; that's where it's coming from:
> kidjo [02:32pm] # strings /usr/bin/ssh | grep away
> You don't exist, go away!
>
> I've gotten that message when playing around with NIS; it looked like the
> SSH client couldn't tell who I was when I ran it, so it quit. I don't
> think you've been cracked; ssh just can't tell who you are.

Thanks. I thought it was coming from the server side, didn't think it
was a client-side issue.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • ssh (sometimes) refused from subnet
    ... Not sure whether this is an ssh issue or my network is misconfigured, ... This is the only client on the subnet. ... debug1: Reading configuration data /etc/ssh_config ... sshd version 1.2.27 ...
    (comp.security.ssh)
  • Re: With FTP, who needs samba?
    ... > views of both local and remote directories and all it needs ... > is sshd on the other end. ... I was gonna say you can also dwnld SSH's M$ client. ... (SSH Tectia) ...
    (comp.os.linux.networking)
  • Re: sshd "DId not receive identification string from"
    ... If the client addresses are ones you don't recognize, ... indicate scans to find out what version of SSH you're running. ... using libwrap or hosts (you didn't say what version of sshd ... you're using), or restrict the sources to authorized ones, if that's ...
    (comp.security.ssh)
  • Re: Failure connecting with ssh
    ... > the system waits one or two seconds and putty crashes. ... > ssh client I can't connect either. ... Perhaps your client is trying to do password authentication ... You can change it in the sshd ...
    (comp.unix.bsd.freebsd.misc)
  • Re: [opensuse] Howto by pass ssh /etc/nologin
    ... bypass by ssh. ... User fajar is not allowed because /etc/nologin exists ... I think it is not possible to configure sshd so that it ignores ... "strings" will only tell you if it looks at that file at all. ...
    (SuSE)

Quantcast