Re: Client connect without host service running?

From: Stuart Lamble (sjl@debtemp.lib.monash.edu.au)
Date: 02/08/02 

From: sjl@debtemp.lib.monash.edu.au (Stuart Lamble)
Date: 8 Feb 2002 05:15:08 GMT

In article <a3vlgh$ngv$1@slb4.atl.mindspring.net>, John Pokinpo wrote:
>I stopped the openssh service on the host and tried logging on from the
>client. To my complete surprise, i was let in. Next, I disabled the service
>on the host and deleted the host's public and private keys - afterwards, the
>client logged in fine.
>
>Questions:
>Isn't openssh service responsible for listening to port for an incoming
>client connection?

Yes. Incoming clients cannot connect via ssh unless openssh is running.
Try doing an "lsof -i" (or "netstat -a") to check whether there is any
process listening to port 22 (TCP).

>Shouldn't client have alerted me that host keys no longer match?

Again, yes.

Are you sure that the client is connecting to the right host? Are you
sure that the client's connecting using the ssh protocol? Are you sure
that the openssh service has been terminated, and that the keys have
changed? (IIRC, openssh caches the keys in memory... I could be wrong,
though.)

netstat -a (or, preferably [in my opinion], lsof -i) is your friend
in tracking down the root causes of these problems. 

-- 
"You didn't slay the dragon?!"
"It's on my to-do list, now come on!"
  -- Shrek.

Relevant Pages