topic Re: ssh problem in Operating System - HP-UX

ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 12:54:42 GMT

Hi All

I have a 2 machine cluster running oracle.

I can ssh to each machine no problem, but I am unable to ssh to the floating ip address. I can ping the address no problems. Also I can ssh to the node where the package is running and then ssh to the shared ip address.

Any Ideas why I cannot ssh straight to the shared ip?

Re: ssh problem

IT_2007 — Tue, 22 Aug 2006 12:56:39 GMT

That IP address may not be in DNS and /etc/hosts.

Re: ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 12:59:39 GMT

Sorry should have stated this:
floating ip is in DNS, and I can ping the ip from anywhere in the domain.

Re: ssh problem

dictum9 — Tue, 22 Aug 2006 13:04:57 GMT

What is the error message you are getting? Does it timeout? Error on authentication and end up asking for password?

To get ssh to work, you need to exchange the public keys.

Post output of

ssh -v -v -v

Re: ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 13:10:02 GMT

$ ssh -v -v -v plnsso01
SSH Version Sun_SSH_1.0, protocol versions 1.5/2.0.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: getuid 29722 geteuid 29722 anon 1
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
Secure connection to plnsso01 refused.
$

Re: ssh problem

dictum9 — Tue, 22 Aug 2006 13:23:53 GMT

It seems like the SSH server is not running on target box, or not listening on port 22.

Re: ssh problem

Steven E. Protter — Tue, 22 Aug 2006 13:27:14 GMT

Shalom,

sshd_config needs a listen directive that includes the floating ip address

diagnostic:
tail -f /var/adm/syslog/syslog.log
# on the node that owns the ip address.

ssh -vvv nodename
# from a reliable openssh client machine outside the cluster.

SEP

Re: ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 13:29:04 GMT

OK thanks. How do I check that? And why does it work when I ssh from the node where the package is to the package ip?

Mark

Re: ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 13:47:27 GMT

ok Everything works fine from the other node. We have switched the package over and can now ssh to the shared ip.

So I guess it is a config problem on the other node.

Re: ssh problem

Sanjay_6 — Tue, 22 Aug 2006 15:01:27 GMT

Hi,

check and make sure the line starting with "ListenAddress" in the sshd_config file (normally in /opt/ssh/etc for HP Openssh) is commented out.

Hope this helps.

regds

Re: ssh problem

Mark McDonald_2 — Tue, 22 Aug 2006 15:43:31 GMT

A colleague has had a dig around, not sure what he changed (il find out when his mail arrives), but the box has been re-booted, we are waiting for the ok to swich the package back.