That's really interesting... I use OpenSSH 2.3.0p1 on Solaris and I have no problem connecting to the filer (runnin 6.1.1R2) via SecureAdmin 2.1.1.
Noelette Stout Unix System Administrator IKON Office Solutions, Inc Digital Express tel. (770)326-4140 fax (770)326-4139 email: nstout@ikon.com
-----Original Message----- From: Hannes Herret [mailto:hh@bacher.at] Sent: Wednesday, December 12, 2001 5:28 AM To: Lance A. Brown Cc: Kendall Libby; toasters@mathworks.com Subject: Re: SecureAdmin
hi,
i now had the same behaviour w/ 6.1.1R2P1 and secureadmin2.1.1 .
see the log from openssh-host -> connection closed without reason !!!
is there a debug of sshd available??
cu hannes
=-> ssh -v -l root filer OpenSSH_2.9p1, SSH protocols 1.5/2.0, OpenSSL 0x0090601f debug1: Reading configuration data /usr/local/ssh/etc/ssh_config debug1: Seeded RNG with 27 bytes from programs debug1: Seeded RNG with 3 bytes from system calls debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: restore_uid debug1: ssh_connect: getuid 0 geteuid 0 anon 1 debug1: Connecting to filer [10.1.1.11] port 22. debug1: temporarily_use_uid: 0/1 (e=0) debug1: restore_uid debug1: temporarily_use_uid: 0/1 (e=0) debug1: restore_uid debug1: Connection established. debug1: read PEM private key done: type DSA debug1: read PEM private key done: type RSA debug1: identity file /root/.ssh/identity type 0 debug1: identity file /root/.ssh/id_rsa type 1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: Remote protocol version 1.5, remote software version 2.1.1 debug1: no match: 2.1.1 debug1: Local version string SSH-1.5-OpenSSH_2.9p1 debug1: Waiting for server public key. debug1: Received server public key (512 bits) and host key (768 bits). debug1: Host 'filer' is known and matches the RSA1 host key. debug1: Found key in /root/.ssh/known_hosts:4 debug1: Encryption type: 3des debug1: Sent encrypted session key. debug1: Installing crc compensation attack detector. debug1: Received encrypted confirmation. debug1: Doing password authentication. root@filer's password: debug1: Requesting pty. debug1: Requesting shell. debug1: Entering interactive session. Connection to filer closed. debug1: Transferred: stdin 0, stdout 1, stderr 29 bytes in 0.5 seconds debug1: Bytes per second: stdin 0.0, stdout 2.0, stderr 58.0 debug1: Exit status 0 debug1: writing PRNG seed to file /root/.ssh/prng_seed root@dumbo : /root :> =->
"Lance A. Brown" wrote:
Greetings,
This is bug 42404, according to my interactions with NetApp support. It is fixed in 6.1.1R1
--[Lance]
SecureAdmin 2.1.1 ONTAP 6.1R1
New system, just slapped SecureAdmin on it... secure filer view works happily, ssh has ... issues.
I can connect fine from a host running ssh v1.2.27, but connecting from OpenSSH hosts seems to fail. Said hosts are FreeBSD and Solaris running 2.3.0 and 2.5.1_p1 respectively. Initially, I thought it was a protocol 2 issue, but that's not it. Here's what happens:
SSH Version OpenSSH_2.3.0 green@FreeBSD.org 20010321, protocol versions 1.5/2.0. Compiled with SSL (0x0090600f). debug: Reading configuration data /etc/ssh/ssh_config debug: Applying options for * debug: ssh_connect: getuid 0 geteuid 0 anon 0 debug: Connecting to (null) [xxx.xxx.xxx.xxx] port 22. debug: Allocated local port 1022. debug: Connection established. debug: Remote protocol version 1.5, remote software version 2.1.1 debug: match: 2.1.1 pat ^2.
debug: Local version string SSH-1.5-OpenSSH_2.3.0 green@FreeBSD.org 20010321 debug: Waiting for server public key. debug: Received server public key (512 bits) and host key (768 bits). debug: Host 'xxx.xxx.xxx.xxx' is known and matches the RSA host key. debug: Encryption type: 3des debug: Sent encrypted session key. debug: Installing crc compensation attack detector. debug: Received encrypted confirmation. debug: Doing password authentication. root@xxx.xxx.xxx.xxx's password: debug: Requesting pty. debug: Requesting X11 forwarding with authentication spoofing. Warning: Remote host denied X11 forwarding. debug: Requesting authentication agent forwarding. Warning: Remote host denied authentication agent forwarding. debug: Requesting shell. debug: Entering interactive session. Connection to xxx.xxx.xxx.xxx closed. debug: Transferred: stdin 0, stdout 1, stderr 36 bytes in 0.5 seconds debug: Bytes per second: stdin 0.0, stdout 2.0, stderr 73.4 debug: Exit status 0
I can't imagine that everyone out there using ssh on the filer is also still using the old ssh versions, so it's gotta be me. Right?
K.
-- ------------------------------------------------------------------- Hannes Herret IT-Service / Storage phone : +43 (1) 60 126-34 Bacher Systems EDV GmbH fax : +43 (1) 60 126-555 Wienerbergstr. 11B mailto:hh@bacher.at A-1101 Wien, Austria www : http://www.bacher.at/ Europe
"NStout" == Stout, Noelette NStout@IKON.com writes:
NStout> That's really interesting... I use OpenSSH 2.3.0p1 on Solaris NStout> and I have no problem connecting to the filer (runnin 6.1.1R2) NStout> via SecureAdmin 2.1.1.
Even better:
netapp> sysconfig NetApp Release 6.1.1R2: Fri Oct 5 04:36:37 PDT 2001 ... netapp> secureadmin version SecureAdmin(tm) 2.1.1
host -> ssh -v OpenSSH_3.0.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f ...
host -> ssh -l root quarry root@quarry's password: Warning: Remote host refused compression. Connection to quarry closed.
ssh-1.2.27 works fine. So what are we doing differently ? :-)
K.
On Wed, 12 Dec 2001, Stout, Noelette wrote:
That's really interesting... I use OpenSSH 2.3.0p1 on Solaris and I have no problem connecting to the filer (runnin 6.1.1R2) via SecureAdmin 2.1.1.
I saw the same behavior as Hannes (6.1.1R1 w/SecureAdmin 2.1.1, connection dropped after entering the password). Upgrading to SecureAdmin 2.1.1D2 corrected it for me. NetApp support said that the problem would only affect OpenSSH clients 2.5 or greater. It had to do with the null padding OpenSSH 2.5+ does for passwords; SecureAdmin wasn't stripping the NULL characters before validating the password.
Hope this helps!
Dawn Lovell dlovell@centurytel.net
Hi,
On Wed, Dec 12, 2001 at 09:23:21AM -0500, Stout, Noelette wrote:
That's really interesting... I use OpenSSH 2.3.0p1 on Solaris and I have no problem connecting to the filer (runnin 6.1.1R2) via SecureAdmin 2.1.1.
I have OpenSSH 2.9.1p2 on Solaris - and it closes the Connection with 6.1.1R1.
Ciao, Hanno