Multiple forced commands being executed



Hi there,

I am having a very strange problem with SSH. Essentially, I'm using
forced commands to restrict access based on public key (there are
around 2000 public keys). It appears to work okay, but when I look at
the ssh -v output I see that the client/server is actually executing
all the forced commands for RSA keys (I am connecting with an RSA key)
until it "hits" my key.

Anyone have any idea why this is happening? I have no clue where to
even look for hints as to what would cause this…

Here's an example of the output I am seeing (condensed, the real
output is ~3000 lines):

OpenSSH_5.2p1, OpenSSL 0.9.8l 5 Nov 2009
debug1: Authentication succeeded (publickey).
debug2: fd 5 setting O_NONBLOCK
debug2: fd 6 setting O_NONBLOCK
debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Requesting no-more-sessions@xxxxxxxxxxx
debug1: Entering interactive session.
debug1: Remote: Forced command: gitosis-serve osjokine
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
[... hundreds more like this ...]
debug1: Remote: Forced command: gitosis-serve obeattie
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
debug1: Remote: Forced command: gitosis-serve osjokine
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
[... hundreds more again ...]
debug1: Remote: Forced command: gitosis-serve obeattie
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
debug2: callback start

—Oliver



Relevant Pages

  • Pls help: slow ssh command
    ... from remote clients take long to finish, ... debug1: Connecting to daisy port 22. ... debug2: fd 3 setting O_NONBLOCK ... debug2: channel 0: request env confirm 0 ...
    (comp.security.ssh)
  • Re: X11 tuneling: a hard to fix problem
    ... debug1: Connecting to remoteserver port 22. ... Remote protocol version 1.99, ... debug2: fd 3 setting O_NONBLOCK ... debug2: channel 0: request pty-req confirm 0 ...
    (SSH)
  • Re: X11 tuneling: a hard to fix problem
    ... debug1: Connecting to remoteserver port 22. ... Remote protocol version 1.99, ... debug2: fd 3 setting O_NONBLOCK ... debug2: channel 0: request pty-req confirm 0 ...
    (SSH)
  • Having trouble using public key authentication
    ... I need to get public key ... authentication working on this box mostly for nicer subversion ... debug1: Connecting to malumgat port 22. ... debug2: fd 3 setting O_NONBLOCK ...
    (comp.security.ssh)
  • Authentication with SSH using public keys
    ... authentication through public key encryption using ssh-keygen and such. ... debug1: Connecting to malumgat port 22. ... debug2: fd 3 setting O_NONBLOCK ...
    (freebsd-questions)