Re: ssh hangs (openssh stop/start fixes problem)

From: Darren Tucker (dtucker_at_zip.com.au)
Date: 02/21/04

  • Next message: peter.kielbasiewicz_at_philips.com: "3.7.1p2 client ignores rsa2 public key authentication on HPUX 10.20" 
    Date: Sun, 22 Feb 2004 09:17:35 +1100
To: "Spurgeon, John P" <john.p.spurgeon@intel.com>

    Spurgeon, John P wrote:
    > % ssh -V
    > OpenSSH_3.7.1p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003

    You should be using 3.7.1p2 if you're using PAM.

    > This morning I was trying to make a connection using ssh. The ssh
    > program would just sit there doing nothing. I tried ssh with the -v
    > option, which showed me that the program wasn't getting very far before
    > it would hang:

    There's a good chance this is the random helper hanging. Try running it
    on its own with debugging ("ssh-rand-helper -vvv") and see if it's
    hanging on a specific command, if so, comment that one out of ssh_prng_cmds. 

    -- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
  • Next message: peter.kielbasiewicz_at_philips.com: "3.7.1p2 client ignores rsa2 public key authentication on HPUX 10.20"

    Relevant Pages

    • Re: Difference between "PasswordAuthentication yes" and "AllowedAuthentication passwo
      ... > Thats why I assumed the clear text passwd. ... Debian's sshd is built with PAM, so I suspect what you see as logging ... the version of OpenSSH Debian uses doesn't use PAM ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: Forcing new password at login (w/o requiring an old password) (sudo related)
      ... If you're using PAM then the user will be forced to set a new password ... when the existing one expires regardless of the authentication method. ... the user can sudo w/o additional authentication even ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: need rhosts rsa help
      ... >I'm having problems getting RhostsRSAAuthentication working on OpenSSH ... It appears from the client log that it's not even attempting ... Since you're using SSHv1 you need to make the "ssh" binary setuid root ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: 5.2p1 no longer sets DISPLAY
      ... client ssh is still 3.9p1 and sshd_config is the same). ... what's happening is that the OS is asked for a list of addresses for localhost and is returning a list that includes the inet6 address, however attempting to bind to it fails. ... Previously sshd would ignore this failure, but that allows third parties to bind to inet6 ports in the X11 forwarding range and potentially hijack X connections. ... Good judgement comes with experience. ...
      (SSH)
    • Re: sftp problems with 3.9 on HP
      ... >ChallengeResponseAuthentication also set to yes that ssh connects just ... $ ssh -v -s sshserver sftp ... against is not in the system's default library search path (ie ... Good judgement comes with experience. ...
      (comp.security.ssh)