OPEN SSH syslog messages

[Rakesh Kapoor]

I am running open ssh 4.1p1 under HP-UX 11.11. I configured it with port # 1575.Now I anm getting these messages in syslog.log over and over:

Oct 19 13:46:41 hsgccu03 sshd[7928]: fatal: Cannot bind any address.
Oct 19 13:46:41 hsgccu03 sshd[7930]: error: Bind to port 1575 on 0.0.0.0 failed: Address already in use.
Oct 19 13:46:41 hsgccu03 sshd[7930]: fatal: Cannot bind any address.
-----------------

This is a test server and there are no users logged in or trying to telnet using that port.

Any idea what these messages are telling me or how to stop them from reoccuring ?

Thanks.

[Sameer_Nirmal]

Open the file /etc/sshd_config
and comment out ListenAddress 0.0.0.0 line.
Then restart the sshd using
#/sbin/init.d/secsh stop
#/sbin/init.d/secsh start

[Rakesh Kapoor]

Thanks dor the reply. But that line was already commented out. Here are the entries in the config file:

# default value.
Port 1575
#Protocol 2,1
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

---------------------

What now?

[vytasgadliauskas]

It meens that souch port is in use,
to make sure try:

netstat -na | grep 1575
and
grep 1575 /etc/services

you can use comand lsof to find who is
using this port.

Try to find who is using this port and close
this program or use some other port.

[Denver Osborn]

could it be that sshd is already running and someone tried to start up another instance? or you've got another app using that port.

telnet 127.0.0.1 1575

if it's OpenSSH listening on that port, you'll see the ver string returned.

Otherwise get lsof and see what's listening on that port if you're not sure.

lsof -i :1575

hope this helps,
-denver

[Rakesh Kapoor]

Thanks guys.
Here is output from all the recommended commands:

netstat -na |grep 1575
results in:
tcp 0 0 *.1575 *.* LISTEN
showing me it's in use.
There is no entry in /etc/services for 1575

_________________________-

telnet 127.0.0.1 1575 hung up trying to connect to 1575:

Trying...Connected to 127.0.0.1.
Escape character is '^]
SSH-1.99-OpenSSH_4.1

lsof -i:1575 caused a memory dump:
# lsof -i:1575
Memory fault(coredump)

______________________________

I am going to change port # and test it again.
I will post the results as soon as I am done,

Thanks.

[Denver Osborn]

your telnet to port 1575 shows sshd is listening on that port. If you have sshd already up and running and try to start it up a 2nd time with the same config, it will fail with the "address already in use" message you saw in your syslog.

-denver

[Rakesh Kapoor]

Thanks to both of you for great tips. I was able to troubleshoot and fix the problem.
I took the following action to fix it:

I found port# 1575 being used by some other unix server, so changed the port #
Made an entry to /etc/services pointing sshd to the new port (tcp):
sshd 1585/tcp # Opensshd daemon
Forced the sshd to read the updated configuration file:
sshd -f /usr/etc/sshd_config
Restarted the sshd

sshd is now accepting connections for the new port.

[Arunvijai_4]

Hi Rakesh,

Try to assign points to all who ever helped you in ITRC,

-Arun

[Rakesh Kapoor]

I would like to but any time I click on points, it just brings me back the same page and no option for points selection? where did the point selection go >
Thanks.

[Arunvijai_4]

Which browser you are using ? You can post this issue to http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=962105

-Arun

[Gamaliel]

Hi Rak,

I'm having a similar problem... how do 'u find the other server that was attached to that port? Where can i get isof?

Regards,