Openssh 3.7.1p2 hangs on Solaris 2.6
From: Orwig, Paul (PORWIG_at_PacificLife.com)
Date: 09/24/03
- Previous message: Benny Helms: "Re: Larger binaries?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "'secureshell@securityfocus.com'" <secureshell@securityfocus.com> Date: Wed, 24 Sep 2003 11:07:17 -0700
We require PAM to authenticate using our NT domain passwords.
Openssh 3.7.1p2 is working on our Solaris 8 system, but hangs on the Solaris
2.6 system.
Any suggestions would be appreciated.
sshd_config:
ROOT[130]# cat /usr/local/etc/sshd_config
# $OpenBSD: sshd_config,v 1.42 2001/09/20 20:57:51 mouring Exp $
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
# This is the sshd server system-wide configuration file. See sshd(8)
# for more information.
Port 22
Protocol 2
#ListenAddress 0.0.0.0
#ListenAddress ::
# HostKey for protocol version 1
HostKey /usr/local/etc/ssh_host_key
# HostKeys for protocol version 2
HostKey /usr/local/etc/ssh_host_rsa_key
HostKey /usr/local/etc/ssh_host_dsa_key
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
# Logging
SyslogFacility AUTH
LogLevel INFO
#obsoletes QuietMode and FascistLogging
# Authentication:
LoginGraceTime 600
PermitRootLogin no
StrictModes yes
RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys
# rhosts authentication should not be used
RhostsAuthentication no
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for
RhostsRSAAuthentication
#IgnoreUserKnownHosts yes
# To disable tunneled clear text passwords, change to no here!
UsePAM yes
PasswordAuthentication no
PermitEmptyPasswords no
# Uncomment to disable s/key passwords
#ChallengeResponseAuthentication no
# Uncomment to enable PAM keyboard-interactive authentication
# Warning: enabling this may bypass the setting of 'PasswordAuthentication'
PAMAuthenticationViaKbdInt yes
# To change Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#AFSTokenPassing no
#KerberosTicketCleanup no
# Kerberos TGT Passing does only work with the AFS kaserver
#KerberosTgtPassing yes
X11Forwarding yes
X11DisplayOffset 100
X11UseLocalhost no
PrintMotd no
#PrintLastLog no
KeepAlive yes
#UseLogin no
#MaxStartups 10:30:60
#Banner /etc/issue.net
#ReverseMappingCheck yes
Subsystem sftp /usr/local/libexec/sftp-serve
sshd debug:
ROOT[130]# /usr/local/sbin/sshd -d -d -d
debug3: Seeding PRNG from /usr/local/libexec/ssh-rand-helper
debug2: read_server_config: filename /usr/local/etc/sshd_config
/usr/local/etc/sshd_config line 39: Deprecated option RhostsAuthentication
/usr/local/etc/sshd_config line 59: Deprecated option
PAMAuthenticationViaKbdInt
debug1: sshd version OpenSSH_3.7.1p2
debug1: private host key: #0 type 0 RSA1
debug3: Not a RSA1 key file /usr/local/etc/ssh_host_rsa_key.
debug1: read PEM private key done: type RSA
debug1: private host key: #1 type 1 RSA
debug3: Not a RSA1 key file /usr/local/etc/ssh_host_dsa_key.
debug1: read PEM private key done: type DSA
debug1: private host key: #2 type 2 DSA
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Server will not fork when running in debugging mode.
Connection from 10.141.1.122 port 34359
debug1: Client protocol version 2.0; client software version OpenSSH_3.7p1
debug1: match: OpenSSH_3.7p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2
debug2: Network child is on pid 2466
debug3: preauth child monitor started
debug3: mm_request_receive entering
debug3: privsep user:group 67:67
debug1: permanently_set_uid: 67/67
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,r
ijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,r
ijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hm
ac-md5-96
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hm
ac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,r
ijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit:
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,r
ijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hm
ac-md5-96
debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hm
ac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug3: mm_request_send entering: type 0
debug3: mm_choose_dh: waiting for MONITOR_ANS_MODULI
debug3: mm_request_receive_expect entering: type 1
debug3: monitor_read: checking request 0
debug3: mm_request_receive entering
debug3: mm_answer_moduli: got parameters: 1024 2048 8192
debug3: mm_request_send entering: type 1
debug2: monitor_read: 0 used once, disabling now
debug3: mm_choose_dh: remaining 0
debug3: mm_request_receive entering
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug2: dh_gen_key: priv key bits set: 143/256
debug2: bits set: 1583/3191
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug2: bits set: 1551/3191
debug3: mm_key_sign entering
debug3: mm_request_send entering: type 4
debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN
debug3: mm_request_receive_expect entering: type 5
debug3: monitor_read: checking request 4
debug3: mm_request_receive entering
debug3: mm_answer_sign
debug3: mm_answer_sign: signature 1223a8(143)
debug3: mm_request_send entering: type 5
debug2: monitor_read: 4 used once, disabling now
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug3: mm_request_receive entering
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user porwig service ssh-connection method none
debug1: attempt 0 failures 0
debug3: mm_getpwnamallow entering
debug3: mm_request_send entering: type 6
debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM
debug3: monitor_read: checking request 6
debug3: mm_request_receive_expect entering: type 7
debug3: mm_request_receive entering
debug3: mm_answer_pwnamallow
debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
debug3: mm_request_send entering: type 7
debug2: monitor_read: 6 used once, disabling now
debug2: input_userauth_request: setting up authctxt for porwig
debug3: mm_request_receive entering
debug3: mm_start_pam entering
debug3: mm_request_send entering: type 43
debug3: mm_inform_authserv entering
debug3: monitor_read: checking request 43
debug3: mm_request_send entering: type 3
debug1: PAM: initializing for "porwig"
debug2: input_userauth_request: try method none
Failed none for porwig from 10.141.1.122 port 34359 ssh2
debug1: userauth-request for user porwig service ssh-connection method
publickey
debug1: attempt 1 failures 1
debug2: input_userauth_request: try method publickey
debug1: test whether pkalg/pkblob are acceptable
debug3: mm_key_allowed entering
debug3: mm_request_send entering: type 20
debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED
debug3: mm_request_receive_expect entering: type 21
debug3: mm_request_receive entering
debug3: Trying to reverse map address 10.141.1.122.
debug1: PAM: setting PAM_RHOST to "annjsp01.amf.pacificlife.net"
debug1: PAM: setting PAM_TTY to "ssh"
debug2: monitor_read: 43 used once, disabling now
debug3: mm_request_receive entering
debug3: monitor_read: checking request 3
debug3: mm_answer_authserv: service=ssh-connection, style=
debug2: monitor_read: 3 used once, disabling now
debug3: mm_request_receive entering
debug3: monitor_read: checking request 20
debug3: mm_answer_keyallowed entering
debug3: mm_answer_keyallowed: key_from_blob: 1299c0
debug1: temporarily_use_uid: 1001/10 (e=0/1)
debug1: trying public key file /home/porwig/.ssh/authorized_keys
debug3: secure_filename: checking '/home/porwig/.ssh'
debug3: secure_filename: checking '/home/porwig'
debug3: secure_filename: terminating check at '/home/porwig'
debug2: key_type_from_name: unknown key type '1024'
debug3: key_read: missing keytype
debug2: user_key_allowed: check options: '1024 35
1296779552431158022738323274766581657155325553102618938698602934173537084072
7917859969398232146859485620660273007243971605823087026725601744072829144222
9090950721275193440734594807300283289861153232657890334868157742504700383188
6610863527946906932293043603464742173769557360044219473567253333166359328390
60659 Personal Private Key
'
debug2: key_type_from_name: unknown key type '35'
debug3: key_read: missing keytype
debug2: user_key_allowed: advance: '35
1296779552431158022738323274766581657155325553102618938698602934173537084072
7917859969398232146859485620660273007243971605823087026725601744072829144222
9090950721275193440734594807300283289861153232657890334868157742504700383188
6610863527946906932293043603464742173769557360044219473567253333166359328390
60659 Personal Private Key
'
debug1: restore_uid: 0/1
debug2: key not found
debug1: temporarily_use_uid: 1001/10 (e=0/1)
debug1: trying public key file /home/porwig/.ssh/authorized_keys2
debug3: secure_filename: checking '/home/porwig/.ssh'
debug3: secure_filename: checking '/home/porwig'
debug3: secure_filename: terminating check at '/home/porwig'
debug3: key_read: type mismatch
debug2: user_key_allowed: check options: 'ssh-dss
AAAAB3NzaC1kc3MAAACBAMKkxFrkQPO3lkKYOwYIHKug/YfCgK5ySnOnnT1jY/mpJChLeIC8nOnR
bY5riu7WAYwizppi2Vx+aT0kOnCAGtgsCt9n4ywgV6zcGKn+MAj1OLv5hOqzqRUr2LrcdhHkcjmC
RyTkLe9wx3szfDnVzuhKus9vFNQ9qd4p0RmxGAUfAAAAFQDtxYMF95nz6/UCOnbHW/GA+W9ytwAA
AIEAu8qvUaLh7j0HqEx/gYiqd3Rira1zEEemDsMHzmgOfw6lewAg8B7De8sLVYNzwVEEdqT3VPIW
eZdUrdGW6ggtHwgxp2+eER1l3XPjKHZdyAyPuU6D2N71j9uYPL/DSBdHVDigIe1seJ8NYYXR//14
swI/SIW65JsdVKQAh9Bpf/8AAACBALR0anxRDFBnuFNlPNz3/SSnl9dTJBDazaxQDl1gfT6oI90/
niJoq4iA/RyupIEVB7pHkEsCeGndfuEP3bdpC2fhbTFaRkTxlE/ka8utWVL/u1Z5MC00opXTf5hL
APVmeVZjAbbC0jpy8S4SPLZ0CW+FLrdyugOucZxvUSXrNBNM porwig@annray001
'
debug2: key_type_from_name: unknown key type
'AAAAB3NzaC1kc3MAAACBAMKkxFrkQPO3lkKYOwYIHKug/YfCgK5ySnOnnT1jY/mpJChLeIC8nOn
RbY5riu7WAYwizppi2Vx+aT0kOnCAGtgsCt9n4ywgV6zcGKn+MAj1OLv5hOqzqRUr2LrcdhHkcjm
CRyTkLe9wx3szfDnVzuhKus9vFNQ9qd4p0RmxGAUfAAAAFQDtxYMF95nz6/UCOnbHW/GA+W9ytwA
AAIEAu8qvUaLh7j0HqEx/gYiqd3Rira1zEEemDsMHzmgOfw6lewAg8B7De8sLVYNzwVEEdqT3VPI
WeZdUrdGW6ggtHwgxp2+eER1l3XPjKHZdyAyPuU6D2N71j9uYPL/DSBdHVDigIe1seJ8NYYXR//1
4swI/SIW65JsdVKQAh9Bpf/8AAACBALR0anxRDFBnuFNlPNz3/SSnl9dTJBDazaxQDl1gfT6oI90
/niJoq4iA/RyupIEVB7pHkEsCeGndfuEP3bdpC2fhbTFaRkTxlE/ka8utWVL/u1Z5MC00opXTf5h
LAPVmeVZjAbbC0jpy8S4SPLZ0CW+FLrdyugOucZxvUSXrNBNM'
debug3: key_read: missing keytype
debug2: user_key_allowed: advance:
'AAAAB3NzaC1kc3MAAACBAMKkxFrkQPO3lkKYOwYIHKug/YfCgK5ySnOnnT1jY/mpJChLeIC8nOn
RbY5riu7WAYwizppi2Vx+aT0kOnCAGtgsCt9n4ywgV6zcGKn+MAj1OLv5hOqzqRUr2LrcdhHkcjm
CRyTkLe9wx3szfDnVzuhKus9vFNQ9qd4p0RmxGAUfAAAAFQDtxYMF95nz6/UCOnbHW/GA+W9ytwA
AAIEAu8qvUaLh7j0HqEx/gYiqd3Rira1zEEemDsMHzmgOfw6lewAg8B7De8sLVYNzwVEEdqT3VPI
WeZdUrdGW6ggtHwgxp2+eER1l3XPjKHZdyAyPuU6D2N71j9uYPL/DSBdHVDigIe1seJ8NYYXR//1
4swI/SIW65JsdVKQAh9Bpf/8AAACBALR0anxRDFBnuFNlPNz3/SSnl9dTJBDazaxQDl1gfT6oI90
/niJoq4iA/RyupIEVB7pHkEsCeGndfuEP3bdpC2fhbTFaRkTxlE/ka8utWVL/u1Z5MC00opXTf5h
LAPVmeVZjAbbC0jpy8S4SPLZ0CW+FLrdyugOucZxvUSXrNBNM porwig@annray001
'
debug1: restore_uid: 0/1
debug2: key not found
debug3: mm_answer_keyallowed: key 1299c0 is disallowed
debug3: mm_request_send entering: type 21
debug3: mm_request_receive entering
debug2: userauth_pubkey: authenticated 0 pkalg ssh-rsa
Failed publickey for porwig from 10.141.1.122 port 34359 ssh2
debug1: userauth-request for user porwig service ssh-connection method
publickey
debug1: attempt 2 failures 2
debug2: input_userauth_request: try method publickey
debug1: test whether pkalg/pkblob are acceptable
debug3: mm_key_allowed entering
debug3: mm_request_send entering: type 20
debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED
debug3: monitor_read: checking request 20
debug3: mm_request_receive_expect entering: type 21
debug3: mm_request_receive entering
debug3: mm_answer_keyallowed entering
debug3: mm_answer_keyallowed: key_from_blob: 1299d8
debug1: temporarily_use_uid: 1001/10 (e=0/1)
debug1: trying public key file /home/porwig/.ssh/authorized_keys
debug3: secure_filename: checking '/home/porwig/.ssh'
debug3: secure_filename: checking '/home/porwig'
debug3: secure_filename: terminating check at '/home/porwig'
debug2: key_type_from_name: unknown key type '1024'
debug3: key_read: missing keytype
debug2: user_key_allowed: check options: '1024 35
1296779552431158022738323274766581657155325553102618938698602934173537084072
7917859969398232146859485620660273007243971605823087026725601744072829144222
9090950721275193440734594807300283289861153232657890334868157742504700383188
6610863527946906932293043603464742173769557360044219473567253333166359328390
60659 Personal Private Key
'
debug2: key_type_from_name: unknown key type '35'
debug3: key_read: missing keytype
debug2: user_key_allowed: advance: '35
1296779552431158022738323274766581657155325553102618938698602934173537084072
7917859969398232146859485620660273007243971605823087026725601744072829144222
9090950721275193440734594807300283289861153232657890334868157742504700383188
6610863527946906932293043603464742173769557360044219473567253333166359328390
60659 Personal Private Key
'
debug1: restore_uid: 0/1
debug2: key not found
debug1: temporarily_use_uid: 1001/10 (e=0/1)
debug1: trying public key file /home/porwig/.ssh/authorized_keys2
debug3: secure_filename: checking '/home/porwig/.ssh'
debug3: secure_filename: checking '/home/porwig'
debug3: secure_filename: terminating check at '/home/porwig'
debug1: restore_uid: 0/1
debug2: key not found
debug3: mm_answer_keyallowed: key 1299d8 is disallowed
debug3: mm_request_send entering: type 21
debug3: mm_request_receive entering
debug2: userauth_pubkey: authenticated 0 pkalg ssh-dss
Failed publickey for porwig from 10.141.1.122 port 34359 ssh2
debug1: userauth-request for user porwig service ssh-connection method
keyboard-interactive
debug1: attempt 3 failures 3
debug2: input_userauth_request: try method keyboard-interactive
debug1: keyboard-interactive devs
debug1: auth2_challenge: user=porwig devs=
debug1: kbdint_alloc: devices 'pam'
debug2: auth2_challenge_start: devices pam
debug2: kbdint_next_device: devices <empty>
debug1: auth2_challenge_start: trying authentication method 'pam'
debug3: mm_sshpam_init_ctx
debug3: mm_request_send entering: type 46
debug3: mm_sshpam_init_ctx: waiting for MONITOR_ANS_PAM_INIT_CTX
debug3: monitor_read: checking request 46
debug3: mm_request_receive_expect entering: type 47
debug3: mm_request_receive entering
debug3: mm_answer_pam_init_ctx
debug3: mm_request_send entering: type 47
debug3: mm_request_receive entering
debug3: mm_sshpam_query
debug3: mm_request_send entering: type 48
debug3: mm_sshpam_query: waiting for MONITOR_ANS_PAM_QUERY
debug3: monitor_read: checking request 48
debug3: mm_request_receive_expect entering: type 49
debug3: mm_request_receive entering
debug3: mm_answer_pam_query
debug3: ssh_msg_recv entering
ssh debug:
porwig[0]$ ssh -v -2 ap-nsm01
OpenSSH_3.7p1, SSH protocols 1.5/2.0, OpenSSL 0.9.6g 9 Aug 2002
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Connecting to ap-nsm01 [10.142.1.127] port 22.
debug1: Connection established.
debug1: identity file /home/porwig/.ssh/id_rsa type 1
debug1: identity file /home/porwig/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.7.1p2
debug1: match: OpenSSH_3.7.1p2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'ap-nsm01' is known and matches the RSA host key.
debug1: Found key in /home/porwig/.ssh/known_hosts:9
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Offering public key: /home/porwig/.ssh/id_rsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Offering public key: /home/porwig/.ssh/id_dsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
- Previous message: Benny Helms: "Re: Larger binaries?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]