ssh connectivity

[Jay McDougal]

When trying to establish an SSH connection between two HP-UX servers over a VLAN I am unsucessfull. But, I am sucessfull at getting a connection between two HP-UX servers on the same subnet.
All servers are using "OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090603f"

I have tested the VLAN and confirmed that port 22 is open in both directions.

There are no inetd services running because I am on a secure network. I cannot ping or telnet accoss the VLAN.

Here is ssh -v results:

$ ssh 208.41.144.151 -l oracle8 -v
HP-UX port of OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090603f
debug1: Reading configuration data /opt/ssh/etc/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 202 geteuid 0 anon 1
debug1: Connecting to 208.41.144.151 [208.41.144.151] port 22.
debug1: temporarily_use_uid: 202/20 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 202/20 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/jrmcdoug/.ssh/id_rsa type -1
debug1: identity file /home/jrmcdoug/.ssh/id_dsa type -1
ssh_exchange_identification: Connection closed by remote host
debug1: Calling cleanup 0x400117aa(0x0)

[Ken Penland_1]

It may be a stupid suggestion, but most of the time for me it turns out to be the problem...it looks like it is just quitting when it tries to authenticate...so you are sure the account is not locked on the remote system?

[Sridhar Bhaskarla]

Hi,

You will get more information on the sshd server side. Run it in debug mode using "sshd -d" and then attempt to connect and observe the output.

It could most probably be permission issues on .ssh or the user's home directory. Also check if the user account is locked or needs to change the password.

Another possibility is to make sure you have /etc/hosts.allow on the remote server and have the entries for sshd. If your sshd was compiled with tcp_wrappers, then you will need to have this file.

sshd: ALL : ALLOW

-Sri

[Chris Vail]

You really need to have the users' home directory to 755. NOTHING ELSE WILL WORK. Also, the authorized_keys files HAS to be 644. Don't do much else until you verify this. If even a single permission bit is off, ssh won't work.

Attached is my usual document about installing and using the secure utilities.

[Zeev Schultz]

What kind of switch do you use?It can be that
your switch isn't supporting SSH-2 (default for OpenSSH & hp ssh product).Also there is
a newer SSH from hp (based on 3.5p1).Read here:http://docs.hp.com/hpux/onlinedocs/T1471-90006/T1471-90006.html
Mostly browse the FAQ.I'd also check /etc/host.allow / deny if there's something in them (since SSH from HP is compiled with TCP Wrappers support).

Zeev