topic Re: OPEN SSH syslog messages in Operating System - HP-UX

OPEN SSH syslog messages

Rakesh Kapoor — Wed, 19 Oct 2005 12:57:10 GMT

I am running open ssh 4.1p1 under HP-UX 11.11. I configured it with port # 1575.Now I anm getting these messages in syslog.log over and over:

Oct 19 13:46:41 hsgccu03 sshd[7928]: fatal: Cannot bind any address.
Oct 19 13:46:41 hsgccu03 sshd[7930]: error: Bind to port 1575 on 0.0.0.0 failed: Address already in use.
Oct 19 13:46:41 hsgccu03 sshd[7930]: fatal: Cannot bind any address.
-----------------

This is a test server and there are no users logged in or trying to telnet using that port.

Any idea what these messages are telling me or how to stop them from reoccuring ?

Thanks.

Re: OPEN SSH syslog messages

Sameer_Nirmal — Wed, 19 Oct 2005 13:36:10 GMT

Open the file /etc/sshd_config
and comment out ListenAddress 0.0.0.0 line.
Then restart the sshd using
#/sbin/init.d/secsh stop
#/sbin/init.d/secsh start

Re: OPEN SSH syslog messages

Rakesh Kapoor — Wed, 19 Oct 2005 13:51:23 GMT

Thanks dor the reply. But that line was already commented out. Here are the entries in the config file:

# default value.
Port 1575
#Protocol 2,1
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

---------------------

What now?

Re: OPEN SSH syslog messages

vytasgadliauskas — Wed, 19 Oct 2005 14:00:07 GMT

It meens that souch port is in use,
to make sure try:

netstat -na | grep 1575
and
grep 1575 /etc/services

you can use comand lsof to find who is
using this port.

Try to find who is using this port and close
this program or use some other port.

Re: OPEN SSH syslog messages

Denver Osborn — Wed, 19 Oct 2005 14:06:46 GMT

could it be that sshd is already running and someone tried to start up another instance? or you've got another app using that port.

telnet 127.0.0.1 1575

if it's OpenSSH listening on that port, you'll see the ver string returned.

Otherwise get lsof and see what's listening on that port if you're not sure.

lsof -i :1575

hope this helps,
-denver

Re: OPEN SSH syslog messages

Rakesh Kapoor — Wed, 19 Oct 2005 14:49:43 GMT

Thanks guys.
Here is output from all the recommended commands:

netstat -na |grep 1575
results in:
tcp 0 0 *.1575 *.* LISTEN
showing me it's in use.
There is no entry in /etc/services for 1575

_________________________-

telnet 127.0.0.1 1575 hung up trying to connect to 1575:

Trying...Connected to 127.0.0.1.
Escape character is '^]
SSH-1.99-OpenSSH_4.1

lsof -i:1575 caused a memory dump:
# lsof -i:1575
Memory fault(coredump)

______________________________

I am going to change port # and test it again.
I will post the results as soon as I am done,

Thanks.

Re: OPEN SSH syslog messages

Denver Osborn — Thu, 20 Oct 2005 05:54:26 GMT

your telnet to port 1575 shows sshd is listening on that port. If you have sshd already up and running and try to start it up a 2nd time with the same config, it will fail with the "address already in use" message you saw in your syslog.

-denver

Re: OPEN SSH syslog messages

Rakesh Kapoor — Thu, 20 Oct 2005 08:49:40 GMT

Thanks to both of you for great tips. I was able to troubleshoot and fix the problem.
I took the following action to fix it:

I found port# 1575 being used by some other unix server, so changed the port #
Made an entry to /etc/services pointing sshd to the new port (tcp):
sshd 1585/tcp # Opensshd daemon
Forced the sshd to read the updated configuration file:
sshd -f /usr/etc/sshd_config
Restarted the sshd

sshd is now accepting connections for the new port.

Re: OPEN SSH syslog messages

Arunvijai_4 — Thu, 20 Oct 2005 08:56:24 GMT

Hi Rakesh,

Try to assign points to all who ever helped you in ITRC,

-Arun

Re: OPEN SSH syslog messages

Rakesh Kapoor — Thu, 20 Oct 2005 09:33:54 GMT

I would like to but any time I click on points, it just brings me back the same page and no option for points selection? where did the point selection go >
Thanks.

Re: OPEN SSH syslog messages

Arunvijai_4 — Thu, 20 Oct 2005 09:40:38 GMT

Which browser you are using ? You can post this issue to http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=962105

-Arun

Re: OPEN SSH syslog messages

Gamaliel — Fri, 24 Feb 2006 13:19:31 GMT

Hi Rak,

I'm having a similar problem... how do 'u find the other server that was attached to that port? Where can i get isof?

Regards,