Tru64 5.1A, IPv6, openssh, and tcp_wrappers

From: Senn, Bruce (sennb_at_union.edu)
Date: 10/15/04

  • Next message: Andy: "LDAPS client"
    Date: Fri, 15 Oct 2004 14:54:02 -0400
    To: tru64-unix-managers@ornl.gov
    
    

    I have upgraded our test server, an Alpha Personal Workstation 600au, to
    Tru64 5.1A. I am now having problems with ssh connections. The first
    error message is:

    Oct 13 14:58:35 testsvr sshd[510671]: refused connect from 0.0.0.0

    As a workaround I added 0.0.0.0 the hosts.allow. Connections succeed
    with the following entry in auth.log.

    Oct 13 15:09:52 testsvr sshd[517969]: Accepted password for username
    from ::ffff:149.106.nn.nn port 4498 ssh2

    My theory is that sshd is getting the IPv6 address, interpreting some
    part of it to be 0.0.0.0, and trying to validate that in hosts.allow.

    This does not happen on my server running Tru64 4.0D.

    Here is some additional version information.
    Openssl 3.4.p1
    Tcp_wrappers 7.6
    Gcc 3.3.1
    Gnu-make 3.8

    There seem to be a couple of configuration options for ssh, namely
    --with-ipv4-default and --with-4in6. There also seems to be an IPv6
    version of tcp_wrappers. I'm not sure what in Tru64 5.1A is returning
    the IPv6 address to ssh or if there is a way to change it.

    Any thoughts or advice would be appreciated.

    TIA.

    Bruce.
    ------------------------------------------------------------------------

    ----
      Bruce J. Senn			Phone:  (518) 388-6664
      Senior System Manager	FAX:    (518) 388-6458
      Union College			E-mail:  sennb@union.edu
      Schenectady, NY 12308	WWW:  http://www1.union.edu/~sennb
    ------------------------------------------------------------------------
    ----
    

  • Next message: Andy: "LDAPS client"

    Relevant Pages

    • Re: Problem with firewall and SSH port forwarding
      ... CG> I'm trying to restrict access to my machine by restricting the IP ... CG> addresses from which outside ssh connections can be made. ... CG> The 'client' is trying to do the following:- ...
      (comp.security.ssh)
    • Re: scp problems between Solaris and Tru64
      ... Ann Majeske wrote: ... > The version of ssh supplied with Tru64 UNIX does not ... > implement the ssh version 1 protocol. ... > way is to install Openssh in addition to the Tru64 ...
      (comp.unix.tru64)
    • Re: scp problems between Solaris and Tru64
      ... This was pretty much a fresh install of Tru64 UNIX. ... nothing related to ssh. ... capable of running ssh protocol 2 or scp Protocol 2 and unwilling to ...
      (comp.unix.tru64)
    • Re: scp problems between Solaris and Tru64
      ... This was pretty much a fresh install of Tru64 UNIX. ... nothing related to ssh. ... capable of running ssh protocol 2 or scp Protocol 2 and unwilling to ...
      (comp.security.ssh)
    • Re: first ssh, then start copying
      ... > MW> look at what files I have on a remote server, then exit, ... > (ssh, scp, sftp, etc.), and these programs do not cooperate to share ... So there's constant creation of new SSH connections, ... Hi Richard! ...
      (comp.security.ssh)