SSH problem

[Mike_305]

Hi,

I have removed the old version of SSH and reinstall HP version of SSH (T1477), and after the install I ran the following command and it fails. Any idea.

Command ran - ssh -l x1234 aaaa.yyyyyyot.com

ERROR - permanently_set_uid: was able to restore old [e]gid

su - to root work OK.

Happy New Year.

Thanks,

Mike

[Steven E. Protter]

Please tell me a little more about the situation.

1) What are you trying to accomplish,ssh and su at the same time?

2) What is the current version of ssh/secure shell?

swlist -l product | grep -i secure

My guess here is that there is a problem with ssh functionality with normal users but not root.

You may need to generate and exchange public keys again.


SEP

[Colin Topliss]

Hi,

also try:

ssh -v -l x1234 aaaa.yyyyyyot.com

It might give you more information about what its complaining about. If -v doesn't, try -vv and -vvv (different levels of verbosity).

Regards

Col.

[Colin Topliss]

Just a thought - I had a look through some snippets of code, and it doesn't appear to be doing anything too unusual. Can you check the permissions on the host and group file? These files need to be readable by everyone.

I'm wondering if it is having a problem getting the info it needs from these files.

Col

[Mike_305]

Hi,

The version that I using is

A.03.91.002 for

HP-UX_B11.11 and product id is T1471AA.

What I am tying to find out is the error that I getting. I have search the ITRC site and I can find similar error on forums or knowledge base

Thanks,

Mike

[Michael Selvesteen_2]

Hi,

Following may help...

1. login as root
2. Issue "newgrp sys"
3. Try SSH again.

Refer for more info

http://www.webservertalk.com/archive94-2004-8-362786.html

Still have problem:

Post your detailed server and client debug messages.
--
M

[Radhakrishnan Venkatara]

Could please provide me the output of the following command

ssh -v x1234@aaaa.yyyyyyot.com


Thanks

[Mike_305]

Hi,

I am running the following command

ssh -l x1234 aaaa.yyyyyyot.com

And below is the error that I am getting.

permanently_set_uid: was able to restore old [e]gid

Thanks,

Mike

[Mike_305]

Hi,

Before when I ran the following command

ssh -l x1234 aaaa.yyyyyyot.com

I got the error below

permanently_set_uid: was able to restore old [e]gid

NOW I am getting the error below;

any idea

Permission denied (publickey,password,keyboard-interactive).

Thanks,

Mike

[Deoncia Grayson_1]

You may want to try these links for futher help:

http://www.derkeiler.com/Mailing-Lists/securityfocus/Secure_Shell/2003-05/0087.html

or

http://lists.netsys.com/pipermail/full-disclosure/2003-May/004838.html

hope this helps.

[Michael Selvesteen_2]

Hello,

Check the following;

1. Did the user x1234 exists in the server
2. Whether password is expired
3. A deliberate analysis of server and clinet debug messages can sort out the problem

Try ssh with debug enabled

client:
ssh -vvv

Server:
/opt/ssh/sbin/sshd -e -ddd

Hope this helps.

--
M

[Fred Ruffet]

I have never used HP's SSH package, but openSSH. When I install, I use to reconfigure ssh_config and sshd_config, and generate keys. Did you went into that process ?
Also, check permissions on your .ssh directories and files in it.

Regards,

Fred

[Mike_305]

Hi,

On the system when I am root it works fine but as a user I get the followin error.

*******************************************
permanently_set_uid: was able to restore old [e]gid
*******************************************

I have also check the different site for information and this error is reported as a bug but no one has the fix on HP-UX.

Where are all the SSH guru's.

THX - Mike

[Chris Vail]

Hi Mike!
Did you re-run "ssh-keygen -t dsa" after you re-installed ssh? I'd also look carefully at the permission settings of ~ and ~/.ssh. Ensure that both systems are running the same version of ssh, and that you're exchanging the same kind of keys.

Chris

[Mike_305]

Hi Chris,

The issue is that as a root user it is working but as a non root user with uid of "0" and different gid it's not working. For your 2nd question the SSH server is Linux server and SSH client is HP client running T1471AA version of Secure Shell.

Thanks,

Mike

[Michael Selvesteen_2]

Hello,

This may be an SSH internal problem,

Following may help...

Try to setuid the ssh binaries,

-rwsr-sr-x 1 bin bin 1314816 Dec 2 17:26 /opt/ssh/PA-RISC2.0/bin/ssh

or

-rwsr-sr-x 1 bin bin 1314816 Dec 2 17:26 /opt/ssh/bin/ssh

All the best.

--
M

[Mike_305]

Hi Guys,

The way we resolve the below error with SSH is;

*********************************************
ERROR: permanently_set_uid: was able to restore old [e]gid
*********************************************

is by going back to older version SSH, see information below;

********************************************
#ssh -V
OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
********************************************

Thanks,

Mike

[Mike_305]

Hi Guys,

The way we resolve the below error with SSH is;

*********************************************
ERROR: permanently_set_uid: was able to restore old [e]gid
*********************************************

is by going back to older version SSH, see information below;

********************************************
#ssh -V
OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
********************************************

Thanks,

Mike