:) ...
In the IT world it takes time to analyze a problem well !!
Congrats ...
Happy Easter !!
On 4 April 2015 at 13:06, Mike <email address hidden> wrote:
> Thank you for the suggestions Gary. I realized that my problem is caused > by the router firmware. Basically, they introduced loopback blocking and > I couldn't connect from the same network even using the external IP. > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/708493 > > Title: > Can't login anymore: Read from socket failed: Connection reset by peer > > Status in openssh package in Ubuntu: > Triaged > Status in openssh package in Debian: > New > > Bug description: > After todays update to > 1:5.7p1-1ubuntu1 > I cannot login to SOME (!) of my servers. Example of a server failing: > > ~$ ssh -v root@mail > OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun 2010 > debug1: Reading configuration data /home/hildeb/.ssh/config > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: Applying options for * > debug1: Connecting to mail [141.42.202.200] port 22. > debug1: Connection established. > debug1: identity file /home/hildeb/.ssh/id_rsa type -1 > debug1: identity file /home/hildeb/.ssh/id_rsa-cert type -1 > debug1: identity file /home/hildeb/.ssh/id_dsa type 2 > debug1: Checking blacklist file /usr/share/ssh/blacklist.DSA-1024 > debug1: Checking blacklist file /etc/ssh/blacklist.DSA-1024 > debug1: identity file /home/hildeb/.ssh/id_dsa-cert type -1 > debug1: identity file /home/hildeb/.ssh/id_ecdsa type -1 > debug1: identity file /home/hildeb/.ssh/id_ecdsa-cert type -1 > debug1: Remote protocol version 1.99, remote software version > OpenSSH_5.5p1 Debian-6 > debug1: match: OpenSSH_5.5p1 Debian-6 pat OpenSSH* > debug1: Enabling compatibility mode for protocol 2.0 > debug1: Local version string SSH-2.0-OpenSSH_5.7p1 Debian-1ubuntu1 > debug1: SSH2_MSG_KEXINIT sent > debug1: SSH2_MSG_KEXINIT received > debug1: kex: server->client aes128-ctr hmac-md5 none > debug1: kex: client->server aes128-ctr hmac-md5 none > debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent > debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP > Read from socket failed: Connection reset by peer > > There is NOTHING in daemon.log, auth.log or syslog on the server I'm > trying to connect to. > > Example of a server NOT failing: > > $ ssh -v root@netsight > OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun 2010 > debug1: Reading configuration data /home/hildeb/.ssh/config > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: Applying options for * > debug1: Connecting to netsight [10.47.2.222] port 22. > debug1: Connection established. > debug1: identity file /home/hildeb/.ssh/id_rsa type -1 > debug1: identity file /home/hildeb/.ssh/id_rsa-cert type -1 > debug1: identity file /home/hildeb/.ssh/id_dsa type 2 > debug1: Checking blacklist file /usr/share/ssh/blacklist.DSA-1024 > debug1: Checking blacklist file /etc/ssh/blacklist.DSA-1024 > debug1: identity file /home/hildeb/.ssh/id_dsa-cert type -1 > debug1: identity file /home/hildeb/.ssh/id_ecdsa type -1 > debug1: identity file /home/hildeb/.ssh/id_ecdsa-cert type -1 > debug1: Remote protocol version 2.0, remote software version > OpenSSH_5.5p1 Debian-6 > debug1: match: OpenSSH_5.5p1 Debian-6 pat OpenSSH* > debug1: Enabling compatibility mode for protocol 2.0 > debug1: Local version string SSH-2.0-OpenSSH_5.7p1 Debian-1ubuntu1 > debug1: SSH2_MSG_KEXINIT sent > debug1: SSH2_MSG_KEXINIT received > debug1: kex: server->client aes128-ctr hmac-md5 none > debug1: kex: client->server aes128-ctr hmac-md5 none > debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent > debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP > debug1: SSH2_MSG_KEX_DH_GEX_INIT sent > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY > debug1: Server host key: RSA > 18:ce:76:c7:7c:f4:98:94:28:8f:62:4a:31:e8:5b:c9 > debug1: Host 'netsight' is known and matches the RSA host key. > debug1: Found key in /home/hildeb/.ssh/known_hosts:56 > debug1: ssh_rsa_verify: signature correct > debug1: SSH2_MSG_NEWKEYS sent > debug1: expecting SSH2_MSG_NEWKEYS > debug1: SSH2_MSG_NEWKEYS received > debug1: Roaming not allowed by server > debug1: SSH2_MSG_SERVICE_REQUEST sent > debug1: SSH2_MSG_SERVICE_ACCEPT received > debug1: Authentications that can continue: publickey,keyboard-interactive > debug1: Next authentication method: publickey > debug1: Offering DSA public key: /home/hildeb/.ssh/id_dsa > debug1: Server accepts key: pkalg ssh-dss blen 433 > debug1: Authentication succeeded (publickey). > Authenticated to netsight ([10.47.2.222]:22). > debug1: channel 0: new [client-session] > debug1: Requesting <email address hidden> > debug1: Entering interactive session. > debug1: Sending environment. > debug1: Sending env LC_MESSAGES = en_US.utf8 > debug1: Sending env LANG = de_DE.UTF-8 > > ProblemType: Bug > DistroRelease: Ubuntu 11.04 > Package: openssh-client 1:5.7p1-1ubuntu1 > ProcVersionSignature: Ubuntu 2.6.37-12.26-generic 2.6.37 > Uname: Linux 2.6.37-12-generic x86_64 > Architecture: amd64 > Date: Thu Jan 27 09:13:15 2011 > ProcEnviron: > LANGUAGE=en_US:en > LANG=de_DE.UTF-8 > LC_MESSAGES=en_US.utf8 > SHELL=/bin/bash > RelatedPackageVersions: > ssh-askpass N/A > libpam-ssh N/A > keychain N/A > ssh-askpass-gnome 1:5.7p1-1ubuntu1 > SSHClientVersion: OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun > 2010 > SourcePackage: openssh > > To manage notifications about this bug go to: > > https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/708493/+subscriptions >
:) ...
In the IT world it takes time to analyze a problem well !!
Congrats ...
Happy Easter !!
On 4 April 2015 at 13:06, Mike <email address hidden> wrote:
> Thank you for the suggestions Gary. I realized that my problem is caused /bugs.launchpad .net/bugs/ 708493 .ssh/config .ssh/id_ rsa type -1 .ssh/id_ rsa-cert type -1 .ssh/id_ dsa type 2 ssh/blacklist. DSA-1024 blacklist. DSA-1024 .ssh/id_ dsa-cert type -1 .ssh/id_ ecdsa type -1 .ssh/id_ ecdsa-cert type -1 OpenSSH_ 5.7p1 Debian-1ubuntu1 KEX_DH_ GEX_REQUEST( 1024<1024< 8192) sent KEX_DH_ GEX_GROUP .ssh/config .ssh/id_ rsa type -1 .ssh/id_ rsa-cert type -1 .ssh/id_ dsa type 2 ssh/blacklist. DSA-1024 blacklist. DSA-1024 .ssh/id_ dsa-cert type -1 .ssh/id_ ecdsa type -1 .ssh/id_ ecdsa-cert type -1 OpenSSH_ 5.7p1 Debian-1ubuntu1 KEX_DH_ GEX_REQUEST( 1024<1024< 8192) sent KEX_DH_ GEX_GROUP KEX_DH_ GEX_INIT sent KEX_DH_ GEX_REPLY c7:7c:f4: 98:94:28: 8f:62:4a: 31:e8:5b: c9 .ssh/known_ hosts:56 SERVICE_ REQUEST sent SERVICE_ ACCEPT received keyboard- interactive .ssh/id_ dsa ature: Ubuntu 2.6.37- 12.26-generic 2.6.37 en_US.utf8 ersions: /bugs.launchpad .net/ubuntu/ +source/ openssh/ +bug/708493/ +subscriptions
> by the router firmware. Basically, they introduced loopback blocking and
> I couldn't connect from the same network even using the external IP.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https:/
>
> Title:
> Can't login anymore: Read from socket failed: Connection reset by peer
>
> Status in openssh package in Ubuntu:
> Triaged
> Status in openssh package in Debian:
> New
>
> Bug description:
> After todays update to
> 1:5.7p1-1ubuntu1
> I cannot login to SOME (!) of my servers. Example of a server failing:
>
> ~$ ssh -v root@mail
> OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun 2010
> debug1: Reading configuration data /home/hildeb/
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug1: Connecting to mail [141.42.202.200] port 22.
> debug1: Connection established.
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: Checking blacklist file /usr/share/
> debug1: Checking blacklist file /etc/ssh/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: Remote protocol version 1.99, remote software version
> OpenSSH_5.5p1 Debian-6
> debug1: match: OpenSSH_5.5p1 Debian-6 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: server->client aes128-ctr hmac-md5 none
> debug1: kex: client->server aes128-ctr hmac-md5 none
> debug1: SSH2_MSG_
> debug1: expecting SSH2_MSG_
> Read from socket failed: Connection reset by peer
>
> There is NOTHING in daemon.log, auth.log or syslog on the server I'm
> trying to connect to.
>
> Example of a server NOT failing:
>
> $ ssh -v root@netsight
> OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun 2010
> debug1: Reading configuration data /home/hildeb/
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug1: Connecting to netsight [10.47.2.222] port 22.
> debug1: Connection established.
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: Checking blacklist file /usr/share/
> debug1: Checking blacklist file /etc/ssh/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: identity file /home/hildeb/
> debug1: Remote protocol version 2.0, remote software version
> OpenSSH_5.5p1 Debian-6
> debug1: match: OpenSSH_5.5p1 Debian-6 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: server->client aes128-ctr hmac-md5 none
> debug1: kex: client->server aes128-ctr hmac-md5 none
> debug1: SSH2_MSG_
> debug1: expecting SSH2_MSG_
> debug1: SSH2_MSG_
> debug1: expecting SSH2_MSG_
> debug1: Server host key: RSA
> 18:ce:76:
> debug1: Host 'netsight' is known and matches the RSA host key.
> debug1: Found key in /home/hildeb/
> debug1: ssh_rsa_verify: signature correct
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: expecting SSH2_MSG_NEWKEYS
> debug1: SSH2_MSG_NEWKEYS received
> debug1: Roaming not allowed by server
> debug1: SSH2_MSG_
> debug1: SSH2_MSG_
> debug1: Authentications that can continue: publickey,
> debug1: Next authentication method: publickey
> debug1: Offering DSA public key: /home/hildeb/
> debug1: Server accepts key: pkalg ssh-dss blen 433
> debug1: Authentication succeeded (publickey).
> Authenticated to netsight ([10.47.2.222]:22).
> debug1: channel 0: new [client-session]
> debug1: Requesting <email address hidden>
> debug1: Entering interactive session.
> debug1: Sending environment.
> debug1: Sending env LC_MESSAGES = en_US.utf8
> debug1: Sending env LANG = de_DE.UTF-8
>
> ProblemType: Bug
> DistroRelease: Ubuntu 11.04
> Package: openssh-client 1:5.7p1-1ubuntu1
> ProcVersionSign
> Uname: Linux 2.6.37-12-generic x86_64
> Architecture: amd64
> Date: Thu Jan 27 09:13:15 2011
> ProcEnviron:
> LANGUAGE=en_US:en
> LANG=de_DE.UTF-8
> LC_MESSAGES=
> SHELL=/bin/bash
> RelatedPackageV
> ssh-askpass N/A
> libpam-ssh N/A
> keychain N/A
> ssh-askpass-gnome 1:5.7p1-1ubuntu1
> SSHClientVersion: OpenSSH_5.7p1 Debian-1ubuntu1, OpenSSL 0.9.8o 01 Jun
> 2010
> SourcePackage: openssh
>
> To manage notifications about this bug go to:
>
> https:/
>