Problem with OpenSSH v3.1p1 on HP-UX 11i

[Sebastien Masson]

Hi all,

I compile the last openssh v3.1p1 on a A500 running HP-UX 11i. The sshd work very well, but the probleme start with ssh client.

If I use the ip address of my client to connect with ssh, everything work fine. But if I use the hostname, I got this strange error message:

ssh: : host nor service provided, or not known

Here is the debug output for who want it:

bash-2.05# ../bin/ssh -v -v -v -l root
OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090603f
debug1: Reading configuration data /opt/openssh-3.1p1/etc/ssh_config
debug3: Seeing PRNG from /opt/openssh-3.1p1/libexec/ssh-rand-helper
debug1: restore_uid
debug1: ssh_connect: getuid 0 geteuid 0 anon 0
ssh: : host nor service provided, or not known


I use the default ssh_config provide by the installation.

My ssh server on the client on which I want to connect is version 2.9, but it's work with the IP address..

[Darrell Allen]

Hi,

The first thing I think of is: does nslookup on your client system resolve your server name correctly?

When I install ssh on a system, my first test is to see if I can ssh from that system to itself. That tests both the server and client of the new installation. Then I begin testing to and from other systems.

Darrell

[Sebastien Masson]

Ok, some other usefull information:

- I already have openssh 2.9p1 installed and work fine, my DNS lookup work fine, my nsswitch is set correcly.

- Even if I try with the word localhost I got the problem, but not wirh 127.0.0.1

- It really thing is like the ssh doesn't use the gethostbyname correctly because I got samething is a give a bad or good hostname to ssh....

[Sebastien Masson]

Hmm after a quick look... is a patch need to fix a the corrupt gethostbyname on HP-UX 11i:

PHCO_25568:

( SR:8606170767 CR:JAGad40031 )
gethostbyname() returns garbage in hostname.

After installing this patch... everything work fine...

I want to put me a 10 points!!!

[Craig Rants]

Good job finding the problem. This is a important fyi for me since I will be getting a 11i box soon and 3.1 is the version I will be putting on it.

Next time you answer a post of mine I'll give you a little extra...

GL,
C

[Venkatesh babu sira_1]

I also have the same problem,but after installing the patch ,if the hostname is in /etc/hosts it will work fine,but HPUX is NIS+ client ,but it won't look in to DNS or NIS+,i will get the same error.

Any help is appreciated
Thanks
-VB

[Venkatesh babu sira_1]

All,
Now back to sqaure one ,openssh core dumps on me.
What all i did was updated patches using custom patch manager
Any clue
Thanks
-VB

[Derek Marshall_1]

anybody know of a patch that fixes dns lookup's too?

thanks.

[Derek Marshall_1]

I think Rouchon has the answer:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x066f7bb04b5cd611abdb0090277a778c,00.html

[Alejandro Orsini]

I experienced the same problem with OpenSSH 3.4p1, and I found that the error was at sshconnect.c, when it call the function getaddrinfo, so I search at HP patch database and I found the HPUX 11 patch which fixed the problem. This is PHNE_27796, and it requires to have PHCO_27434 as well as PHCO_24402 previously installed. After installing them, ssh started working fine.

[Pratyush Paul_1]

Yes, this problem is there with HP-UX 11.i I am having the same problem if you compile and build openssh 3.7.p1 on HP-UX 11.i, the work around is this way.

1. Compile and build OpenSSH 3.7.p1 on HP-UX 11.0(use Zlib 1.1.4 & OpenSSL 0.9.7c). Anything below these Versions are simply compromising your infrastructure security)

2. Test it here on the HP-UX 11.0

3. Depotize this openssh 3.7.P1

#swpackage -vv -s openssh.psf @ /depot/openssh.3.7.p1

4. swreg -l depot @ /depot/openssh.3.7.p1

5. Now install this on your HP-UX 11.i system.

#swinstall -s remote_host:/depot/openssh.3.7.p1

It will work, and there is absolutely no problems.

This is happening as HP made some changes with the library files in HP-UX in 11.i, hence ssh is unable to do a hostname lookup and hence ssh_connect is failing.

Will update you once I am done with this and I have documented the process. I am going to send it to this forum.

Please be aware, OpenSSH 3.7.P1 with Zlib 1.1.4 and OpenSSL 0.9.7c is the only way you can make your server secure. Please do not use depotized verion available on different sites, as there might be a security risk.

regards

Pratyush