Re: Problem connecting to SSH, OpenVMS7.3-2, HP TCP/IP v5.4 patched



Ah ha!!

My logs show...

$ Set NoOn
$ VERIFY = F$VERIFY(F$TRNLNM("SYLOGIN_VERIFY"))
%DCL-W-ACTIMAGE, error activating image DECW$SETSHODISSHR
-CLI-E-IMGNAME, image file
VAX2$DKA0:[SYS0.SYSCOMMON.][SYSLIB]DECW$SETSHODISSHR.
EXE;1
-SYSTEM-F-PRIVINSTALL, shareable images must be installed to run
privileged imag
e
TCPIP$SSH job terminated at 21-NOV-2006 09:54:57.40

So, it looks like the install may have not *really* worked - it should
install the image as part of the install process.

So, trash and rebuild VMS?? I have already disabled and re-enabled, it
obviously didn't help....sigh

On Nov 21, 10:06 am, s...@xxxxxxxxxxxx (Steven M. Schweda) wrote:
From: "Milton" <milton.b...@xxxxxxxxx>



$ ssh -v beta
debug: Ssh2/SSH2.C:1847: CRTL version (SYS$SHARE:DECC$SHR.EXE ident) is V7.3-2-0
0
debug: SshAppCommon/SSHAPPCOMMON.C:307: Allocating global SshRegex context.
debug: SshConfig/SSHCONFIG.C:3285: Metaconfig parsing stopped at line 3.
debug: SshConfig/SSHCONFIG.C:842: Setting variable 'VerboseMode' to 'FALSE'.
debug: SshConfig/SSHCONFIG.C:3193: Unable to open ssh2/ssh2_config
debug: Connecting to beta, port 22... (SOCKS not used)
debug: Ssh2/SSH2.C:2813: Entering event loop.
debug: Ssh2Client/SSHCLIENT.C:1607: Creating transport protocol.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:99: Added "publickey" to usable meth
ods.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:99: Added "keyboard-interactive" to
usable methods.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:99: Added "password" to usable metho
ds.
debug: Ssh2Client/SSHCLIENT.C:1648: Creating userauth protocol.
debug: client supports 3 auth methods:
'publickey,keyboard-interactive,password'
debug: SshUnixTcp/SSHUNIXTCP.C:1356: using local hostname beta.xxx.com
debug: Ssh2Common/SSHCOMMON.C:545: local ip = 192.168.100.201, local port = 4915
2
debug: Ssh2Common/SSHCOMMON.C:547: remote ip = 192.168.100.201, remote port = 22
debug: SshConnection/SSHCONN.C:2277: Wrapping...
debug: SshReadLine/SSHREADLINE.C:3651: Initializing ReadLine...
debug: Ssh2Common/SSHCOMMON.C:184: DISCONNECT received: Connection closed by rem
ote host.
debug: SshReadLine/SSHREADLINE.C:3717: Uninitializing ReadLine...
warning: Authentication failed.
debug: Ssh2/SSH2.C:316: locally_generated = TRUE
Disconnected; connection lost (Connection closed by remote host.).
debug: Ssh2Client/SSHCLIENT.C:1683: Destroying client.
debug: SshConfig/SSHCONFIG.C:2745: Freeing pki. (host_pki != NULL, user_pki = NU
LL)
debug: SshConnection/SSHCONN.C:2329: Destroying SshConn object.
debug: Ssh2Client/SSHCLIENT.C:1751: Destroying client completed.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:104: Destroying authentication metho
d array.
debug: SshAppCommon/SSHAPPCOMMON.C:320: Freeing global SshRegex context.
debug: SshConfig/SSHCONFIG.C:2745: Freeing pki. (host_pki = NULL, user_pki = NUL
L)
So, as you can see, I am trying to make an ssh connection with the
client on the same node as the server. So it appears.

I have also tried using various
windows-based ssh clients and get the same result. I thought that if
it can't work locally, its not going to work remotely either! Sounds reasonable to me.

When I do the same thing, we look similar for a while, and then
diverge:

alp $ tcpip show version

HP TCP/IP Services for OpenVMS Alpha Version V5.4 - ECO 6
on a COMPAQ Professional Workstation XP1000 running OpenVMS V7.3-2

alp $ ssh "-V"
alp$dka0:[sys0.syscommon.][sysexe]tcpip$ssh_ssh2.exe: SSH Secure Shell OpenVMS (
V5.5) 3.2.0 on COMPAQ Professional Workstation - VMS V7.3-2

alp $ ssh -v alp
debug: Ssh2/SSH2.C:1906: CRTL version (SYS$SHARE:DECC$SHR.EXE ident) is V7.3-2-0
3
debug: SshAppCommon/SSHAPPCOMMON.C:322: Allocating global SshRegex context.
debug: SshConfig/SSHCONFIG.C:3332: Metaconfig parsing stopped at line 4.
debug: SshConfig/SSHCONFIG.C:861: Setting variable 'VerboseMode' to 'FALSE'.
debug: SshConfig/SSHCONFIG.C:3240: Unable to open ssh2/ssh2_config
debug: Connecting to alp, port 22... (SOCKS not used)
debug: Ssh2/SSH2.C:2872: Entering event loop.
debug: Ssh2Client/SSHCLIENT.C:1608: Creating transport protocol.
[Here things start to differ, but not in obviously fatal ways.]
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:101: Added "hostbased" to usable met
hods.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:101: Added "publickey" to usable met
hods.
debug: SshAuthMethodClient/SSHAUTHMETHODC.C:101: Added "password" to usable meth
ods.
debug: Ssh2Client/SSHCLIENT.C:1649: Creating userauth protocol.
debug: client supports 3 auth methods: 'hostbased,publickey,password'
debug: SshUnixTcp/SSHUNIXTCP.C:1378: using local hostname alp.antinode.org
debug: Ssh2Common/SSHCOMMON.C:546: local ip = 10.0.0.9, local port = 58480
debug: Ssh2Common/SSHCOMMON.C:548: remote ip = 10.0.0.9, remote port = 22
debug: SshConnection/SSHCONN.C:2290: Wrapping...
debug: SshReadLine/SSHREADLINE.C:3670: Initializing ReadLine...
[Here, I continue happily, where you enter the fatal vortex.]
debug: Remote version: SSH-2.0-3.2.0 SSH Secure Shell OpenVMS V5.5 VMS_sftp_vers
ion 2
debug: Major: 3 Minor: 2 Revision: 0
debug: Ssh2Transport/TRCOMMON.C:2268: lang s to c: `', lang c to s: `'
debug: Ssh2Transport/TRCOMMON.C:2333: c_to_s: cipher aes128-cbc, mac hmac-sha1,
compression none
debug: Ssh2Transport/TRCOMMON.C:2336: s_to_c: cipher aes128-cbc, mac hmac-sha1,
compression none
debug: Remote host key found from database.
[... more successful stuff ...]

Knowing little, I'd guess that the server dies in some way to cause
that "DISCONNECT received: Connection closed by remote host." message.

You might look for interesting stuff in the log file(s):
SYS$SYSDEVICE:[TCPIP$SSH]TCPIP$SSH_RUN.LOG
One of my successful run log files looks like this:

$ Set NoOn
$ VERIFY = F$VERIFY(F$TRNLNM("SYLOGIN_VERIFY"))
Mon 20 17:24:23 WARNING: Starting image in auxiliary server mode.
Mon 20 17:24:23 INFORMATIONAL: OpenVMS$gl_sockfd = 0
Mon 20 17:24:23 INFORMATIONAL: connection from "10.0.0.9"
Mon 20 17:24:23 WARNING: Error trying to access file /home_sms/sms/ssh2/knownhosts/alp_antinode_org_ssh-dss.pub.
[No surprise, as I allow, but don't use, host-based authentication.]
Mon 20 17:24:24 NOTICE: Public key /home_sms/sms/ssh2/SMS_NPP_ID_DSA_1024_A.PUB used.
Mon 20 17:24:24 NOTICE: Public key authentication for user sms accepted.
Mon 20 17:24:24 NOTICE: User sms, coming from alp.antinode.org, authenticated.
[Normal logout here.]
Mon 20 17:24:30 INFORMATIONAL: Local disconnected: Connection closed.
Mon 20 17:24:30 INFORMATIONAL: connection lost: 'Connection closed.'
TCPIP$SSH job terminated at 20-NOV-2006 17:24:30.94

Accounting information:
Buffered I/O count: 675 Peak working set size: 9280
Direct I/O count: 321 Peak virtual size: 181632
Page faults: 692 Mounted volumes: 0
Charged CPU time: 0 00:00:00.38 Elapsed time: 0 00:00:07.89

I changed my SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG file so:

ALP $ diff /merg = 0 SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.TEMPLATE
.
************
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.TEMPLATE;1
******
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.;4
164 AllowedAuthentications hostbased, publickey, password
************
************
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.TEMPLATE;1
******
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.;4
222 IgnoreRhosts no
************

Number of difference sections found: 2
Number of difference records found: 2
[...]

The non-default "AllowedAuthentications" accounts for the early
differences between our messages. I made a similar change to the
SSH2_CONFIG file, but I don't know if that one matters:

ALP $ diff /merg = 0 SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSH2_CONFIG.TEMPLATE
.
************
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSH2_CONFIG.TEMPLATE;1
******
File SYS$SYSDEVICE:[TCPIP$SSH.SSH2]SSH2_CONFIG.;2
131 AllowedAuthentications hostbased, publickey, password
************

Number of difference sections found: 1
Number of difference records found: 1
[...]

------------------------------------------------------------------------

Steven M. Schweda sms@antinode-org
382 South Warwick Street (+1) 651-699-9818
Saint Paul MN 55105-2547

.



Relevant Pages

  • Re: Problem: I cant debug APP VS 2003 with ActiveSync 4.5
    ... Since you're using ActiveSync to make the connection, not the network, you ... install the Smart Device development components... ... In this machine I can work normaly (i can debug APP with VS2003), ...
    (microsoft.public.pocketpc.activesync)
  • Re: Debugging vs2005/ce6 KITL ?
    ... Install the latest version of ActiveSync, even if it won't be used as your ... I cannot get my debugging connection to work. ... I want to debug over TCPIP, preferably using KITL, which is working fine. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Debugging vs2005/ce6 KITL ?
    ... Install the latest version of ActiveSync, even if it won't be used as your ... I cannot get my debugging connection to work. ... I want to debug over TCPIP, preferably using KITL, which is working fine. ... In the connection options, it says "Activesync" for bootstrapper, do I ...
    (microsoft.public.windowsce.platbuilder)
  • Re: ActiveSync 4.1 Still does not work... (Solved for me)
    ... (The default installation do not configure the network connection ... AS4.1 installs some USB ... > the device as new the next time we install it. ... > in the system tray for the new 'network adapter' with the 'acquiring network ...
    (microsoft.public.pocketpc.activesync)
  • Re: I am having connectivity problems
    ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ... does the connection problem persist? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)