Mailing List Archive: [Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II

bugzilla-daemon at mindrot

Mar 2, 2005, 3:22 PM

Post #1 of 11 (434 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

Summary: OpenSSH cannot connect to an IBM RSA (Remote Supervisor
Adaptor) II
Product: Portable OpenSSH
Version: 3.9p1
Platform: All
OS/Version: All
Status: NEW
Severity: major
Priority: P2
Component: ssh
AssignedTo: openssh-bugs@mindrot.org
ReportedBy: mkatz@combinenet.com

OpenSSH 3.9p1 on Linux, and whatever the most current verion on Mac OS X is (I
don't have my iBook with me currently, but it is having the same problem) will
not connect correctly to an IBM Remote Supervisor Adapter II card. The card
runs some type of embedded software and provides an SSH connection to the
command-line interface to do nifty things on your IBM xSeries machine like power
off/on, tempature monitoring and the like. The RSA will accept the username and
password, but then close the connection instead of offering the shell. I will
attach a copy of the debug trace. Could this be a client-server version
negotiation issue?

Thanks.

Moshe Hyzon

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 2, 2005, 3:33 PM

Post #2 of 11 (435 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From mkatz@combinenet.com 2005-03-03 10:33 -------
Created an attachment (id=840)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=840&action=view)
Email sent to IBM containing a debug (-v -v -v) dump of failed connection

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 2, 2005, 3:34 PM

Post #3 of 11 (432 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

mkatz@combinenet.com changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #840|Email sent to IBM containing|Debug (-v -v -v) dump of
description|a debug (-v -v -v) dump of |failed connection
|failed connection |

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 2, 2005, 3:38 PM

Post #4 of 11 (433 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From mkatz@combinenet.com 2005-03-03 10:38 -------
I forgot to mention that PuTTY under windows (version 0.56) works fine
connectiong to the RSAII.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 2, 2005, 9:12 PM

Post #5 of 11 (438 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From dtucker@zip.com.au 2005-03-03 16:12 -------
(From update of attachment 840)
>debug2: channel 0: open confirm rwindow 65536 rmax 16384
>debug1: channel 0: free: client-session, nchannels 1
>debug3: channel 0: status: The following connections are open:
> #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cfd -1)
>debug3: channel 0: close_fds r 4 w 5 e 6 c -1
>Connection to dgsq-asm1 closed by remote host.
>Connection to dgsq-asm1 closed.

This looks like the server is exitting immediately (crashing, perhaps?) Is
there any way to check the server's log or run it in debug mode?

A couple of things you can try (but probably won't help):
* disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")
* disable pty allocation ("ssh -T yourserver")

Failing that you may have to ask IBM.

>I've compared this to a successful login to another machine and the only difference is the lines
>debug2: channel 0: open confirm rwindow 0 rmax 32768
>debug2: channel 0: rcvd adjust 131072

That's just the receive window size and maximum (ssh) packet size, those can be
different for different implementations.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 2, 2005, 9:15 PM

Post #6 of 11 (433 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From dtucker@zip.com.au 2005-03-03 16:15 -------
(In reply to comment #2)
> I forgot to mention that PuTTY under windows (version 0.56) works fine
> connectiong to the RSAII.

Could you turn on packet debugging in PuTTY, log a connection and attach the
log? (your password may be in the log so make sure you delete it it before
uploading).

It may not help either but comparing it with the OpenSSH log may provide a clue.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 3, 2005, 9:03 AM

Post #7 of 11 (437 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From mkatz@combinenet.com 2005-03-04 04:03 -------
Created an attachment (id=843)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=843&action=view)
PuTTY packet log

Here is a successful connection via PuTTY

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 3, 2005, 9:03 AM

Post #8 of 11 (435 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

mkatz@combinenet.com changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #843|application/octet-stream |text/plain
mime type| |

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 3, 2005, 9:37 AM

Post #9 of 11 (435 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From mkatz@combinenet.com 2005-03-04 04:37 -------
(In reply to comment #3)

> This looks like the server is exitting immediately (crashing, perhaps?) Is
> there any way to check the server's log or run it in debug mode?
> A couple of things you can try (but probably won't help):
> * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")

That did it! APparently, the IBM server doesn't like agent forwarding. :-/
Well, I guess it's their problem, then huh?

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 3, 2005, 9:48 AM

Post #10 of 11 (433 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

------- Additional Comments From mkatz@combinenet.com 2005-03-04 04:48 -------
(In reply to comment #6)
> (In reply to comment #3)
> > This looks like the server is exitting immediately (crashing, perhaps?) Is
> > there any way to check the server's log or run it in debug mode?
> > A couple of things you can try (but probably won't help):
> > * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")
> That did it! APparently, the IBM server doesn't like agent forwarding. :-/
> Well, I guess it's their problem, then huh?

Also, X11Forwarding needs to be off as well.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 990] OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II [ In reply to ]

bugzilla-daemon at mindrot

Mar 6, 2005, 3:20 AM

Post #11 of 11 (441 views)

http://bugzilla.mindrot.org/show_bug.cgi?id=990

dtucker@zip.com.au changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID

------- Additional Comments From dtucker@zip.com.au 2005-03-06 22:20 -------
(In reply to comment #6)
> > ("ssh -o ForwardAgent=no yourserver")
>
> That did it!

Wow, that was a long shot.

> Apparently, the IBM server doesn't like agent forwarding. :-/
> Well, I guess it's their problem, then huh?

Sure looks like that, and without some kind of debugging from the server, IBM is
the only one who can verify it.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.