Connection closing on AIX 5.1

From: Doug Summers (dsummers2_at_cox.net)
Date: 01/27/04 

Date: Tue, 27 Jan 2004 12:52:59 -0800

Using OpenSSH 3.7.1-p2 from Darren Tucker's page...

I have a mixed environment of Solaris 8/9, RedHat Linux 7.3/9.0, and AIX
4.3.3/5.1. All are using the version listed above of OpenSSH. I am
trying to setup public-key authentication for myself so I can login
without a password for scripting. My home directory is NFS-mounted to
all systems. All user ID's are supplied by NIS (passwords are locked)
and normal (telnet) authentication is done by AFS. On every system
(except AIX 5.1) this works.

Here is the client-side debug log:

OpenSSH_3.7.1p2, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
debug1: Reading configuration data /opt/csw/etc/ssh_config
debug1: Connecting to xxxxxx [x.x.x.x] port 22.
debug1: Connection established.
debug1: identity file /home/summersd/.ssh/identity type -1
debug1: identity file /home/summersd/.ssh/id_rsa type -1
debug1: identity file /home/summersd/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version
OpenSSH_3.7.1p2-pwexp24
debug1: match: OpenSSH_3.7.1p2-pwexp24 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'xxxxxx' is known and matches the RSA host key.
debug1: Found key in /home/summersd/.ssh/known_hosts:5
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/summersd/.ssh/identity
debug1: Trying private key: /home/summersd/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: channel 0: free: client-session, nchannels 1
Connection to xxxxxx closed by remote host.
Connection to xxxxxx closed.
debug1: Transferred: stdin 0, stdout 0, stderr 79 bytes in 0.1 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 744.8
debug1: Exit status -1

The server-side debug log:

debug1: sshd version OpenSSH_3.7.1p2-pwexp24
debug1: read PEM private key done: type RSA
debug1: private host key: #0 type 1 RSA
debug1: read PEM private key done: type DSA
debug1: private host key: #1 type 2 DSA
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Server will not fork when running in debugging mode.
Connection from 9.72.4.76 port 64665
debug1: Client protocol version 2.0; client software version OpenSSH_3.7.1p2
debug1: match: OpenSSH_3.7.1p2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2-pwexp24
debug1: permanently_set_uid: 201/201
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user summersd service ssh-connection method
none
debug1: attempt 0 failures 0
Failed none for summersd from x.x.x.x port 64665 ssh2
Failed none for summersd from x.x.x.x port 64665 ssh2
debug1: userauth-request for user summersd service ssh-connection method
publickey
debug1: attempt 1 failures 1
debug1: temporarily_use_uid: 13255/1 (e=0/0)
debug1: trying public key file /home/summersd/.ssh/authorized_keys
debug1: matching key found: file /home/summersd/.ssh/authorized_keys, line 1
Found matching RSA key: x:x:x:x
debug1: restore_uid: 0/0
debug1: ssh_rsa_verify: signature correct
Accepted publickey for summersd from x.x.x.x port 64665 ssh2
Accepted publickey for summersd from x.x.x.x port 64665 ssh2
debug1: monitor_child_preauth: summersd has been authenticated by
privileged process
Failed to set process credentials
debug1: Calling cleanup 0x2000ee70(0x0)

Relevant Pages

  • OpenSSH 3.5p1 port forwarding problem on Solaris 2.8
    ... I'm trying to use port forwarding to get a SqlNet connections back thru ... This gets a Connection refused. ... debug1: Rhosts Authentication disabled, ...
    (comp.security.ssh)
  • Re: socket behavior - already bound
    ... conflict you have is that the IPv6 ANY address includes IPv4 addresses. ... debug1: read PEM private key done: type RSA ... Server listening on:: port 22. ...
    (comp.unix.programmer)
  • Re: OPENSSH 3.4p1-3 on AIX 4.3.3
    ... Teh debug output from the server is exactly the same, ... another port. ... reverse dns setup properly for that client? ... debug1: Server will not fork when running in debugging mode. ...
    (SSH)
  • Re: OpenSSH and pam_radius_auth.so
    ... ::ffff:10.4.148.59 port 1195 ssh2 ... debug1: PAM: num PAM env strings 0 ...
    (comp.security.ssh)
  • ssh: acces denied (only from remote network)
    ... ListenAddress:: ... owl:/home/mitja# debug1: read PEM private key done: type RSA ... Bind to port 22 on 0.0.0.0. ... Server listening on 0.0.0.0 port 22. ...
    (comp.os.linux.networking)