topic Re: ssh loopback error in Operating System - HP-UX

ssh loopback error

Andrew_adm — Mon, 16 Oct 2006 08:59:37 GMT

Hi,
After installing and configuring ssh (04.00.002) on two identical servers, system a is unable to accept a ssh loopback on itself, the other is configured in the same way and it works, why could it be?, I receive next messages on syslog.log:
Oct 16 15:38:43 safi_ar sshd[10744]: Received signal 15; terminating.
Oct 16 15:38:50 safi_ar sshd[11066]: Server listening on 0.0.0.0 port 22
Oct 16 15:38:58 safi_ar sshd[11109]: error: key_read: uudecode AAAAB3NzaC1kc3MAAACBAPeB7BeMUZfAgvcBRHDtPIE4NvxGbCRLt8L4UzbvuJZDYf62YOd+1ZLUkxOMKI9/dWuKdpjf5miHYhi2HySaymj6soeDTojTO\n failed

The user who tries this is a non-root user
I don´t get to resolve the uucode issue, i dont know why it occurs, on the other hand i changed the ListenAddress line in sshd_config file by the server real ip address, i stopped ssh, restarted and the issue was not resolved, but a new message was shown on syslog.log, on the system that works properly ListenAddress line is configured as 0.0.0.0 too. Thx for future help, and regards.

Re: ssh loopback error

Ivan Ferreira — Mon, 16 Oct 2006 10:47:36 GMT

Looks like a problem with your keys, check the key file permissions or generate a new one:

# ssh-keygen -t rsa /opt/ssh/etc/ssh_host_rsa_key
# ssh-keygen -t dsa /opt/ssh/etc/ssh_host_dsa_key
# ssh-keygen -t rsa1 /opt/ssh/etc/ssh_host_key

Re: ssh loopback error

Andrew_adm — Mon, 16 Oct 2006 11:01:59 GMT

Hi IvÃ¡n,
I dont think it be the cause, all keys were created the last week in several systems to allow to this non-root user authenticate in several systems without passphrase, password or something like that. This non-root user is able to do ssh connections to several systems and from several systems, but he canÂ´t do it on the same system.
On the other hand, key files permissions are exactly equal than the system that works properly ssh loopback connections, and configured too, in the same way.
The system that works is a cloned system of the other one (safi_ar) make_net_recovery via.

Re: ssh loopback error

Peter Nikitka — Mon, 16 Oct 2006 11:54:10 GMT

Hi,

if you have a cloned server, you may have changed the host name compared to the original one.
So I consider generating new host keys as a MUST. Has this been performed?

mfG Peter

Re: ssh loopback error

Andrew_adm — Mon, 16 Oct 2006 17:14:50 GMT

Yes, it has been performed, systems are named with different hostnames.