SSH error when connecting over putty

[Anshif]

Hi All,
Appreciate your quick help on this.
I am having issue while connecting to one of the server over ssh using putty. When i conncet to the server putty is getting disconnected with following message
"Server Unexpectedely closed network connection"
but after continuously tried for 2 or 3 times, i will be able to connect. I am facing this issue after restoring this server from ignite last week. before that this was working perfectly. Also i dont have any issue connecting to any of the other servers.
when i checked the syslog i found following error occuring continously.
###### truncated#### error: PAM: Authentication failed for cipher1 from###### truncated####

###### truncated#### Failed password for cipher1 from Failed password for cipher1 from

Can anyone help me on this?

Thanks in advance

[bullz]

Hello Anshif,

Login to server via telnet and porvide the log io /var/adm/syslog/syslog.log

we will be able to get some clue from it.

If possible try to restart SSH on it.

[Tingli]

Take a look at /opt/ssh/etc/sshd_conf and compare it with other system to see whether there is any difference.

[Anshif]

Yes,
I compared it with othere servers. both are identical

[Chandrahasa s]

Hi,

Convert your server to untrusted mode using sam
once then reconvert to trusted mode.

Type ssh -V and find ssh version you can download latest ssh from open ssh site repect of os version and install it hope this will resolver issue.

Chandra

[Anshumali]

ssh -vvv Server IP might give some clue along with SSH debug on server side


To log at the DEBUG level, do the following:


# vi /opt/ssh/etc/sshd_config

# sftp-server logging
LogSftp yes
SftpLogFacility LOCAL1
SftpLogLevel DEBUG


# vi /etc/syslog.conf

local1.debug /var/adm/syslog/sshd.log


# kill -HUP


# /sbin/init.d/secsh stop


# /sbin/init.d/secsh start


Then all the logging will appear in /var/adm/syslog/sshd.log.


# ps -ef |grep ssh

Does the ssh to localhost has the issue all the time as well?

[Kapil Jha]

are you tryingt o connect through cipher1 server.

if not then cipher1 is accessing your server with wrong passwd >>> check that

Can you check ps -ef|grep ssh|wc

BR,
Kapil+