Bug 990 - OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II
Summary: OpenSSH cannot connect to an IBM RSA (Remote Supervisor Adaptor) II
Status: CLOSED INVALID
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh (show other bugs)
Version: 3.9p1
Hardware: All All
: P2 major
Assignee: OpenSSH Bugzilla mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-03-03 10:22 AEDT by Moshe Hyzon
Modified: 2006-10-07 11:38 AEST (History)
0 users

See Also:


Attachments
Debug (-v -v -v) dump of failed connection (9.42 KB, text/html)
2005-03-03 10:33 AEDT, Moshe Hyzon
no flags Details
PuTTY packet log (17.36 KB, text/plain)
2005-03-04 04:03 AEDT, Moshe Hyzon
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Moshe Hyzon 2005-03-03 10:22:20 AEDT
OpenSSH 3.9p1 on Linux, and whatever the most current verion on Mac OS X is (I
don't have my iBook with me currently, but it is having the same problem) will
not connect correctly to an IBM Remote Supervisor Adapter II card.  The card
runs some type of embedded software and provides an SSH connection to the
command-line interface to do nifty things on your IBM xSeries machine like power
off/on, tempature monitoring and the like.  The RSA will accept the username and
password,  but then close the connection instead of offering the shell.  I will
attach a copy of the debug trace.  Could this be a client-server version
negotiation issue?

Thanks.

Moshe Hyzon
Comment 1 Moshe Hyzon 2005-03-03 10:33:24 AEDT
Created attachment 840 [details]
Debug (-v -v -v) dump of failed connection
Comment 2 Moshe Hyzon 2005-03-03 10:38:25 AEDT
I forgot to mention that PuTTY under windows (version 0.56) works fine
connectiong to the RSAII.  
Comment 3 Darren Tucker 2005-03-03 16:12:53 AEDT
Comment on attachment 840 [details]
Debug (-v -v -v) dump of failed connection

>debug2: channel 0: open confirm rwindow 65536 rmax 16384
>debug1: channel 0: free: client-session, nchannels 1
>debug3: channel 0: status: The following connections are open:
>  #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cfd -1)
>debug3: channel 0: close_fds r 4 w 5 e 6 c -1
>Connection to dgsq-asm1 closed by remote host.
>Connection to dgsq-asm1 closed.

This looks like the server is exitting immediately (crashing, perhaps?)  Is
there any way to check the server's log or run it in debug mode?

A couple of things you can try (but probably won't help):
 * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")
 * disable pty allocation ("ssh -T yourserver")

Failing that you may have to ask IBM.

>I've compared this to a successful login to another machine and the only difference is the lines
>debug2: channel 0: open confirm rwindow 0 rmax 32768
>debug2: channel 0: rcvd adjust 131072

That's just the receive window size and maximum (ssh) packet size, those can be
different for different implementations.
Comment 4 Darren Tucker 2005-03-03 16:15:52 AEDT
(In reply to comment #2)
> I forgot to mention that PuTTY under windows (version 0.56) works fine
> connectiong to the RSAII.  

Could you turn on packet debugging in PuTTY, log a connection and attach the
log?  (your password may be in the log so make sure you delete it it before
uploading).

It may not help either but comparing it with the OpenSSH log may provide a clue.
Comment 5 Moshe Hyzon 2005-03-04 04:03:23 AEDT
Created attachment 843 [details]
PuTTY packet log

Here is a successful connection via PuTTY
Comment 6 Moshe Hyzon 2005-03-04 04:37:36 AEDT
(In reply to comment #3)

> This looks like the server is exitting immediately (crashing, perhaps?)  Is
> there any way to check the server's log or run it in debug mode?
> A couple of things you can try (but probably won't help):
>  * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")

That did it!  APparently, the IBM server doesn't like agent forwarding. :-/  
Well, I guess it's their problem, then huh?
Comment 7 Moshe Hyzon 2005-03-04 04:48:36 AEDT
(In reply to comment #6)
> (In reply to comment #3)
> > This looks like the server is exitting immediately (crashing, perhaps?)  Is
> > there any way to check the server's log or run it in debug mode?
> > A couple of things you can try (but probably won't help):
> >  * disable agent forwarding: ("ssh -o ForwardAgent=no yourserver")
> That did it!  APparently, the IBM server doesn't like agent forwarding. :-/  
> Well, I guess it's their problem, then huh?


Also, X11Forwarding needs to be off as well.
Comment 8 Darren Tucker 2005-03-06 22:20:00 AEDT
(In reply to comment #6)
> > ("ssh -o ForwardAgent=no yourserver")
> 
> That did it!

Wow, that was a long shot.

> Apparently, the IBM server doesn't like agent forwarding. :-/  
> Well, I guess it's their problem, then huh?

Sure looks like that, and without some kind of debugging from the server, IBM is
the only one who can verify it.
Comment 9 Darren Tucker 2006-10-07 11:38:54 AEST
Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.