topic Re: ssh issue in Operating System - HP-UX

ssh issue

Alex Ferreira — Mon, 14 May 2007 19:24:08 GMT

Greetings All,
I currently have an issue with ssh.
Scenario..

I have switched disks on two boxes, all seems to be working except for ssh.

The box I am trying to connect to is in DMZ. Currently running Hp 11i, and running latest patches, ssh version is 4.30.014

Box trying to connect from runs AIX. Was working on the previous set of disks.

Need help getting ssh running.

Thanks,

Alex.

Re: ssh issue

Olivier Masse — Mon, 14 May 2007 19:46:41 GMT

If the switch you're talking about is swapping some data disks from system A to system B, you must be sure that system B has the same host key that system A used to have. Currently, the AIX systems tries to talk to system B, expecting the host key from system A, and it fails with a "security breach" message (or similar).

If that is the case, simply copy all the files named /opt/ssh/etc/ssh_host_key and ssh_host_*_key from A to B and it should work again.

Re: ssh issue

Alex Ferreira — Mon, 14 May 2007 21:22:23 GMT

Olivier,

thank you for replying so quickly. I have tried what you suggested but no go. When I try to start ssh back up it comes up with the following error :
PRNG seed extraction failed
ssh-rand-helper child produced insufficient date
exit code:255

Now, what I did, was basically copy * in /opt/ssh/etc. Was this correct, or was I ONLY to copy the host keys*

Re: ssh issue

Jov — Mon, 14 May 2007 21:35:24 GMT

Hi Alex,

Trying recopying the /opt/ssh/etc (or was it /etc/sshd) content with -p to perserve the datestamps of the files.

See how it goes.

Jov

Re: ssh issue

Alex Ferreira — Mon, 14 May 2007 22:01:46 GMT

Jov,

tried it but no good...

Any other suggestions?

Re: ssh issue

Jov — Mon, 14 May 2007 22:15:17 GMT

Hi,

See if these threads will help

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=494030&admit=-682735245+1179198565796+28353475

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=226042

From the error (PRNG) it's related to the underlying random generated used. The 2nd thread should me most helpful.

Jov

Re: ssh issue

Alex Ferreira — Mon, 14 May 2007 22:41:17 GMT

I copied all files from /opt/ssh/etc/ except for the ssh_prng_cmds file and it has let me start ssh up, but still no good. Seems like the connection is timing out.

The server is closing the connection and not letting me connect..ARGH!!!

Re: ssh issue

Jov — Mon, 14 May 2007 22:54:48 GMT

Hi,

I am not familar with PRNG, but you'll probably need to regenerate ssh_prng_cmds.

Jov

Re: ssh issue

Jov — Mon, 14 May 2007 22:57:44 GMT

Hi Alex,

Have a read of this..

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=319327

Jov

Re: ssh issue

Alex Ferreira — Tue, 15 May 2007 00:23:28 GMT

No joy.

I have checked the syslogs and it is showing /opt/ssh/etc/primes has bad descriptions.

Funny thing though, don't have a primes that I can find. Anyone know what this /opt/ssh/etc/primes is?

Alex

Re: ssh issue

Jov — Tue, 15 May 2007 05:50:04 GMT

Have a read of this http://www.snailbook.com/faq/ossh-primes-file.auto.html

Jov

Re: ssh issue

Alex Ferreira — Sun, 20 May 2007 19:00:01 GMT

Hi there,

I have not been able to fix this ssh issue, with the latest ssh version. I had to go to an older version and I can now login remotely.

I want to thank you both for your suggestions. I have assigned points to you both for taking time out of your busy schedules and posting your suggestions.

I will need to setup a test env and play a little more.

Again, thanks heaps for replying.

Alex

Re: ssh issue

Alex Ferreira — Sun, 20 May 2007 19:01:36 GMT

Thanks Again.

Alex