topic Re: issue with ssh doing wrong name resolution in Operating System - HP-UX

issue with ssh doing wrong name resolution

amithp — Thu, 16 Jul 2009 08:26:32 GMT

Hi for some reason there a wrong entry in DNS
and we are unable to edit the entry so we are using /etc/hosts for name resolution

Im trying to ssh to a server with /etc/nsswitch.conf having entry
hosts: files [NOTFOUND=continue UNAVAIL=continue TRAYGAIN=continue] dns

But the ssh is resolving the name using DNS.

grep cap1rtr7 /etc/hosts
10.130.145.37 prortr07.unix.gsm1900.org prortr07 cap1rtr7 cap1rtr7.gsm1900.org bil1rtr7

tstsam15:17(/root)# ssh -v cap1rtr7
OpenSSH_3.9, OpenSSL 0.9.7d 17 Mar 2004
HP-UX Secure Shell-A.03.91.009, HP-UX Secure Shell version
debug1: Reading configuration data /opt/ssh/etc/ssh_config
debug1: Connecting to cap1rtr7 [10.130.145.50] port 22.

please help the nslookup is using /etc/hosts only

Re: issue with ssh doing wrong name resolution

Ganesan R — Thu, 16 Jul 2009 08:46:10 GMT

Hi Amithp,

Make another seperate entry in /etc/hosts file for cap1rtr7 like below.

10.130.145.37 cap1rtr7 cap1rtr7.gsm1900.org

Re: issue with ssh doing wrong name resolution

amithp — Thu, 16 Jul 2009 09:11:00 GMT

Hi Ganeshan no luck.

It is not working even then.
It is working only when im removein /etc/resolv.conf which we dont want to do

Re: issue with ssh doing wrong name resolution

Sunny123_1 — Thu, 16 Jul 2009 09:24:10 GMT

Hi

What entries you have in your /etc/resolv.conf.Can you post it???

Regards
Sunny

Re: issue with ssh doing wrong name resolution

amithp — Thu, 16 Jul 2009 09:28:13 GMT

tstsam15:17(/root)# more /etc/resolv.conf
search unix.gsm1900.org gsm1900.org voicestream.com .
nameserver 10.1.16.43
nameserver 10.1.16.46
nameserver 10.65.16.41
nameserver 10.133.113.71
retry 1
retrans 1000

Re: issue with ssh doing wrong name resolution

Asif Sharif — Thu, 16 Jul 2009 09:36:14 GMT

Salam Amir,

I think it goes to name server for resolving. You need to check /etc/nsswitch.conf.

Regards,
Asif Sharif

Re: issue with ssh doing wrong name resolution

amithp — Thu, 16 Jul 2009 09:47:26 GMT

[root@tstqat01:/root]# more /etc/nsswitch.conf
#
# /etc/nsswitch.files:
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# does not use any name services.
#
passwd: files
group: files
hosts: files [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] dns
services: files
networks: files
protocols: files
rpc: files
publickey: files
netgroup: files
automount: files
aliases: files

Re: issue with ssh doing wrong name resolution

amithp — Thu, 16 Jul 2009 09:48:32 GMT

sorry it was entry of diff server

hosts: files [NOTFOUND=continue UNAVAIL=continue TRAYGAIN=continue] dns

Re: issue with ssh doing wrong name resolution

Ganesan R — Thu, 16 Jul 2009 10:03:25 GMT

Hi,

It is syntax error on your nsswitch.conf file. You should press "tab" after hosts: and put your order like this.

hosts: files [NOTFOUND=continue] dns

It looks you don't have any space between hosts:files

Re: issue with ssh doing wrong name resolution

Ganesan R — Thu, 16 Jul 2009 10:15:38 GMT

Hi again,

Check this option with nslookup to find which source nslookup is using for naming resolution.

#nslookup -swtrace cap1rtr7

It should use files first then goto dns. If it is directly going to DNS means it is having some issue with /etc/nsswitch.conf

If it is searching on files first then goes to DNS means it is ok. But if it is not resolving from files means some issue with /etc/hosts file.

Re: issue with ssh doing wrong name resolution

Bill Hassell — Thu, 16 Jul 2009 10:27:29 GMT

Always check name resolution with nsquery as well as nslookup:

nslookup cap1rtr7
nslookup 10.130.145.37
nsquery hosts cap1rtr7
nsquery hosts 10.130.145.37

Notice there are two ways to look up information? Always verify that reverse lookup (ie, what is the name for a given IP address) works too. Both methods are used by telnet, ssh, and other communication protocols.

And you have a spelling error in the nsswitch.conf file:

TRAYGAIN=continue
should be:
TRYGAIN=continue

Re: issue with ssh doing wrong name resolution

amithp — Fri, 17 Jul 2009 04:36:08 GMT

thanks ganeshan and bill. issue got resolved when in corrected the spelling mistake.

Re: issue with ssh doing wrong name resolution

amithp — Fri, 17 Jul 2009 04:36:35 GMT

thanks