topic Re: SSH problem in Operating System - HP-UX

SSH problem

Mike_305 — Sat, 01 Jan 2005 16:49:33 GMT

Hi,

I have removed the old version of SSH and reinstall HP version of SSH (T1477), and after the install I ran the following command and it fails. Any idea.

Command ran - ssh -l x1234 aaaa.yyyyyyot.com

ERROR - permanently_set_uid: was able to restore old [e]gid

su - to root work OK.

Happy New Year.

Thanks,

Mike

Re: SSH problem

Steven E. Protter — Sat, 01 Jan 2005 23:19:00 GMT

Please tell me a little more about the situation.

1) What are you trying to accomplish,ssh and su at the same time?

2) What is the current version of ssh/secure shell?

swlist -l product | grep -i secure

My guess here is that there is a problem with ssh functionality with normal users but not root.

You may need to generate and exchange public keys again.

SEP

Re: SSH problem

Colin Topliss — Sun, 02 Jan 2005 18:06:19 GMT

Hi,

also try:

ssh -v -l x1234 aaaa.yyyyyyot.com

It might give you more information about what its complaining about. If -v doesn't, try -vv and -vvv (different levels of verbosity).

Regards

Col.

Re: SSH problem

Colin Topliss — Sun, 02 Jan 2005 18:36:09 GMT

Just a thought - I had a look through some snippets of code, and it doesn't appear to be doing anything too unusual. Can you check the permissions on the host and group file? These files need to be readable by everyone.

I'm wondering if it is having a problem getting the info it needs from these files.

Col

Re: SSH problem

Mike_305 — Sun, 02 Jan 2005 22:09:08 GMT

Hi,

The version that I using is

A.03.91.002 for

HP-UX_B11.11 and product id is T1471AA.

What I am tying to find out is the error that I getting. I have search the ITRC site and I can find similar error on forums or knowledge base

Thanks,

Mike

Re: SSH problem

Michael Selvesteen_2 — Sun, 02 Jan 2005 22:58:57 GMT

Hi,

Following may help...

1. login as root
2. Issue "newgrp sys"
3. Try SSH again.

Refer for more info

http://www.webservertalk.com/archive94-2004-8-362786.html

Still have problem:

Post your detailed server and client debug messages.
--
M

Re: SSH problem

Radhakrishnan Venkatara — Mon, 03 Jan 2005 02:45:41 GMT

Could please provide me the output of the following command

ssh -v x1234@aaaa.yyyyyyot.com

Thanks

Re: SSH problem

Mike_305 — Mon, 03 Jan 2005 14:49:34 GMT

Hi,

I am running the following command

ssh -l x1234 aaaa.yyyyyyot.com

And below is the error that I am getting.

permanently_set_uid: was able to restore old [e]gid

Thanks,

Mike

Re: SSH problem

Mike_305 — Mon, 03 Jan 2005 16:27:45 GMT

Hi,

Before when I ran the following command

ssh -l x1234 aaaa.yyyyyyot.com

I got the error below

permanently_set_uid: was able to restore old [e]gid

NOW I am getting the error below;

any idea

Permission denied (publickey,password,keyboard-interactive).

Thanks,

Mike

Re: SSH problem

Deoncia Grayson_1 — Mon, 03 Jan 2005 16:39:18 GMT

You may want to try these links for futher help:

http://www.derkeiler.com/Mailing-Lists/securityfocus/Secure_Shell/2003-05/0087.html

or

http://lists.netsys.com/pipermail/full-disclosure/2003-May/004838.html

hope this helps.

Re: SSH problem

Michael Selvesteen_2 — Tue, 04 Jan 2005 04:32:33 GMT

Hello,

Check the following;

1. Did the user x1234 exists in the server
2. Whether password is expired
3. A deliberate analysis of server and clinet debug messages can sort out the problem

Try ssh with debug enabled

client:
ssh -vvv

Server:
/opt/ssh/sbin/sshd -e -ddd

Hope this helps.

--
M

Re: SSH problem

Fred Ruffet — Tue, 04 Jan 2005 06:04:54 GMT

I have never used HP's SSH package, but openSSH. When I install, I use to reconfigure ssh_config and sshd_config, and generate keys. Did you went into that process ?
Also, check permissions on your .ssh directories and files in it.

Regards,

Fred

Re: SSH problem

Mike_305 — Wed, 05 Jan 2005 14:46:37 GMT

Hi,

On the system when I am root it works fine but as a user I get the followin error.

*******************************************
permanently_set_uid: was able to restore old [e]gid
*******************************************

I have also check the different site for information and this error is reported as a bug but no one has the fix on HP-UX.

Where are all the SSH guru's.

THX - Mike

Re: SSH problem

Chris Vail — Wed, 05 Jan 2005 17:37:28 GMT

Hi Mike!
Did you re-run "ssh-keygen -t dsa" after you re-installed ssh? I'd also look carefully at the permission settings of ~ and ~/.ssh. Ensure that both systems are running the same version of ssh, and that you're exchanging the same kind of keys.

Chris

Re: SSH problem

Mike_305 — Wed, 05 Jan 2005 17:56:24 GMT

Hi Chris,

The issue is that as a root user it is working but as a non root user with uid of "0" and different gid it's not working. For your 2nd question the SSH server is Linux server and SSH client is HP client running T1471AA version of Secure Shell.

Thanks,

Mike

Re: SSH problem

Michael Selvesteen_2 — Wed, 05 Jan 2005 23:01:36 GMT

Hello,

This may be an SSH internal problem,

Following may help...

Try to setuid the ssh binaries,

-rwsr-sr-x 1 bin bin 1314816 Dec 2 17:26 /opt/ssh/PA-RISC2.0/bin/ssh

or

-rwsr-sr-x 1 bin bin 1314816 Dec 2 17:26 /opt/ssh/bin/ssh

All the best.

--
M

Re: SSH problem

Mike_305 — Thu, 06 Jan 2005 19:22:25 GMT

Hi Guys,

The way we resolve the below error with SSH is;

*********************************************
ERROR: permanently_set_uid: was able to restore old [e]gid
*********************************************

is by going back to older version SSH, see information below;

********************************************
#ssh -V
OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
********************************************

Thanks,

Mike

Re: SSH problem

Mike_305 — Thu, 06 Jan 2005 19:23:13 GMT