ssh problem

[Mark McDonald_2]

Hi All

I have a 2 machine cluster running oracle.

I can ssh to each machine no problem, but I am unable to ssh to the floating ip address. I can ping the address no problems. Also I can ssh to the node where the package is running and then ssh to the shared ip address.

Any Ideas why I cannot ssh straight to the shared ip?

[IT_2007]

That IP address may not be in DNS and /etc/hosts.

[Mark McDonald_2]

Sorry should have stated this:
floating ip is in DNS, and I can ping the ip from anywhere in the domain.

[dictum9]

What is the error message you are getting? Does it timeout? Error on authentication and end up asking for password?

To get ssh to work, you need to exchange the public keys.

Post output of

ssh -v -v -v

[Mark McDonald_2]

$ ssh -v -v -v plnsso01
SSH Version Sun_SSH_1.0, protocol versions 1.5/2.0.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: getuid 29722 geteuid 29722 anon 1
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
debug1: Trying again...
debug1: Connecting to plnsso01 [10.1.8.24] port 22.
debug1: connect: Connection refused
Secure connection to plnsso01 refused.
$

[dictum9]

It seems like the SSH server is not running on target box, or not listening on port 22.

[Steven E. Protter · Accepted solution]

Shalom,

sshd_config needs a listen directive that includes the floating ip address

diagnostic:
tail -f /var/adm/syslog/syslog.log
# on the node that owns the ip address.

ssh -vvv nodename
# from a reliable openssh client machine outside the cluster.

SEP

[Mark McDonald_2]

OK thanks. How do I check that? And why does it work when I ssh from the node where the package is to the package ip?

Mark

[Mark McDonald_2]

ok Everything works fine from the other node. We have switched the package over and can now ssh to the shared ip.

So I guess it is a config problem on the other node.

[Sanjay_6]

Hi,

check and make sure the line starting with "ListenAddress" in the sshd_config file (normally in /opt/ssh/etc for HP Openssh) is commented out.

Hope this helps.

regds