Attachment 865 Details for Bug 1004 – ssh -vvv output after setting complete path to Xauthlocation and restarting sshd

ssh -vvv output after setting complete path to Xauthlocation and restarting sshd

ssh_vvv_31Mar2005.txt (text/plain), 10.83 KB, created by SS on 2005-04-01 04:23:46 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: SS

Created: 2005-04-01 04:23:46 AEST

Size: 10.83 KB

patch

obsolete

>[root@xxxxxxxxxxxx root]# ssh -X -vvv 64.xx.x.xxx
>OpenSSH_3.9p1, OpenSSL 0.9.6b [engine] 9 Jul 2001
>debug1: Reading configuration data /etc/ssh/ssh_config
>debug2: ssh_connect: needpriv 0
>debug1: Connecting to 64.xx.x.xxx [64.xx.x.xxx] port 22.
>debug1: Connection established.
>debug1: permanently_set_uid: 0/0
>debug1: identity file /root/.ssh/identity type -1
>debug1: identity file /root/.ssh/id_rsa type -1
>debug1: identity file /root/.ssh/id_dsa type -1
>debug1: Remote protocol version 1.99, remote software version OpenSSH_3.9p1
>debug1: match: OpenSSH_3.9p1 pat OpenSSH*
>debug1: Enabling compatibility mode for protocol 2.0
>debug1: Local version string SSH-2.0-OpenSSH_3.9p1
>debug2: fd 3 setting O_NONBLOCK
>debug1: SSH2_MSG_KEXINIT sent
>debug1: SSH2_MSG_KEXINIT received
>debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
>debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
>debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
>debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
>debug2: kex_parse_kexinit: none,zlib
>debug2: kex_parse_kexinit: none,zlib
>debug2: kex_parse_kexinit:
>debug2: kex_parse_kexinit:
>debug2: kex_parse_kexinit: first_kex_follows 0
>debug2: kex_parse_kexinit: reserved 0
>debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
>debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
>debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
>debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
>debug2: kex_parse_kexinit: none,zlib
>debug2: kex_parse_kexinit: none,zlib
>debug2: kex_parse_kexinit:
>debug2: kex_parse_kexinit:
>debug2: kex_parse_kexinit: first_kex_follows 0
>debug2: kex_parse_kexinit: reserved 0
>debug2: mac_init: found hmac-md5
>debug1: kex: server->client aes128-cbc hmac-md5 none
>debug2: mac_init: found hmac-md5
>debug1: kex: client->server aes128-cbc hmac-md5 none
>debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
>debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
>debug2: dh_gen_key: priv key bits set: 145/256
>debug2: bits set: 512/1024
>debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
>debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
>debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts2
>debug3: check_host_in_hostfile: match line 8
>debug1: Host '64.94.5.248' is known and matches the RSA host key.
>debug1: Found key in /root/.ssh/known_hosts2:8
>debug2: bits set: 489/1024
>debug1: ssh_rsa_verify: signature correct
>debug2: kex_derive_keys
>debug2: set_newkeys: mode 1
>debug1: SSH2_MSG_NEWKEYS sent
>debug1: expecting SSH2_MSG_NEWKEYS
>debug2: set_newkeys: mode 0
>debug1: SSH2_MSG_NEWKEYS received
>debug1: SSH2_MSG_SERVICE_REQUEST sent
>debug2: service_accept: ssh-userauth
>debug1: SSH2_MSG_SERVICE_ACCEPT received
>debug2: key: /root/.ssh/identity ((nil))
>debug2: key: /root/.ssh/id_rsa ((nil))
>debug2: key: /root/.ssh/id_dsa ((nil))
>debug1: Authentications that can continue: publickey,password,keyboard-interactive
>debug3: start over, passed a different list publickey,password,keyboard-interactive
>debug3: preferred publickey,keyboard-interactive,password
>debug3: authmethod_lookup publickey
>debug3: remaining preferred: keyboard-interactive,password
>debug3: authmethod_is_enabled publickey
>debug1: Next authentication method: publickey
>debug1: Trying private key: /root/.ssh/identity
>debug3: no such identity: /root/.ssh/identity
>debug1: Trying private key: /root/.ssh/id_rsa
>debug3: no such identity: /root/.ssh/id_rsa
>debug1: Trying private key: /root/.ssh/id_dsa
>debug3: no such identity: /root/.ssh/id_dsa
>debug2: we did not send a packet, disable method
>debug3: authmethod_lookup keyboard-interactive
>debug3: remaining preferred: password
>debug3: authmethod_is_enabled keyboard-interactive
>debug1: Next authentication method: keyboard-interactive
>debug2: userauth_kbdint
>debug2: we sent a keyboard-interactive packet, wait for reply
>debug1: Authentications that can continue: publickey,password,keyboard-interactive
>debug3: userauth_kbdint: disable: no info_req_seen
>debug2: we did not send a packet, disable method
>debug3: authmethod_lookup password
>debug3: remaining preferred:
>debug3: authmethod_is_enabled password
>debug1: Next authentication method: password
>root@64.94.5.248's password:
>debug3: packet_send2: adding 64 (len 60 padlen 4 extra_pad 64)
>debug2: we sent a password packet, wait for reply
>debug1: Authentication succeeded (password).
>debug1: channel 0: new [client-session]
>debug3: ssh_session2_open: channel_new: 0
>debug2: channel 0: send open
>debug1: Entering interactive session.
>debug2: callback start
>debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-jfLPt24927/xauthfile generate :0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null
>debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-jfLPt24927/xauthfile list :0.0 . 2>/dev/null
>debug1: Requesting X11 forwarding with authentication spoofing.
>debug2: channel 0: request x11-req confirm 0
>debug2: client_session2_setup: id 0
>debug2: channel 0: request pty-req confirm 0
>debug3: tty_make_modes: ospeed 38400
>debug3: tty_make_modes: ispeed 38400
>debug3: tty_make_modes: 1 3
>debug3: tty_make_modes: 2 28
>debug3: tty_make_modes: 3 127
>debug3: tty_make_modes: 4 21
>debug3: tty_make_modes: 5 4
>debug3: tty_make_modes: 6 0
>debug3: tty_make_modes: 7 0
>debug3: tty_make_modes: 8 17
>debug3: tty_make_modes: 9 19
>debug3: tty_make_modes: 10 26
>debug3: tty_make_modes: 12 18
>debug3: tty_make_modes: 13 23
>debug3: tty_make_modes: 14 22
>debug3: tty_make_modes: 18 15
>debug3: tty_make_modes: 30 0
>debug3: tty_make_modes: 31 0
>debug3: tty_make_modes: 32 0
>debug3: tty_make_modes: 33 0
>debug3: tty_make_modes: 34 0
>debug3: tty_make_modes: 35 0
>debug3: tty_make_modes: 36 1
>debug3: tty_make_modes: 37 0
>debug3: tty_make_modes: 38 1
>debug3: tty_make_modes: 39 0
>debug3: tty_make_modes: 40 0
>debug3: tty_make_modes: 41 0
>debug3: tty_make_modes: 50 1
>debug3: tty_make_modes: 51 1
>debug3: tty_make_modes: 52 0
>debug3: tty_make_modes: 53 1
>debug3: tty_make_modes: 54 1
>debug3: tty_make_modes: 55 1
>debug3: tty_make_modes: 56 0
>debug3: tty_make_modes: 57 0
>debug3: tty_make_modes: 58 0
>debug3: tty_make_modes: 59 1
>debug3: tty_make_modes: 60 1
>debug3: tty_make_modes: 61 1
>debug3: tty_make_modes: 62 0
>debug3: tty_make_modes: 70 1
>debug3: tty_make_modes: 71 0
>debug3: tty_make_modes: 72 1
>debug3: tty_make_modes: 73 0
>debug3: tty_make_modes: 74 0
>debug3: tty_make_modes: 75 0
>debug3: tty_make_modes: 90 1
>debug3: tty_make_modes: 91 1
>debug3: tty_make_modes: 92 0
>debug3: tty_make_modes: 93 0
>debug2: channel 0: request shell confirm 0
>debug2: fd 3 setting TCP_NODELAY
>debug2: callback done
>debug2: channel 0: open confirm rwindow 0 rmax 32768
>debug2: channel 0: rcvd adjust 131072
>Last login: Thu Mar 31 12:35:04 2005 from 12.34.138.233
>[root@xxxxxxxxx root]# echo $DISPLAY
>
>[root@xxxxxxxxx root]# export DISPLAY=64.xx.x.xxx:10.0
>
>[root@xxxxxxxxx root]# echo $DISPLAY
>64.xx.x.xxx:10.0
>
>[root@xxxxxxxxx root]# netscape
>Error: Can't open display: 64.xx.x.xxx:10.0
>
>[root@xxxxxxxxx root]# cat /etc/ssh/sshd_config
>#       $OpenBSD: sshd_config,v 1.69 2004/05/23 23:59:53 dtucker Exp $
>
># This is the sshd server system-wide configuration file.  See
># sshd_config(5) for more information.
>
># This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin
>
># The strategy used for options in the default sshd_config shipped with
># OpenSSH is to specify options with their default value where
># possible, but leave them commented.  Uncommented options change a
># default value.
>
>#Port 22
>#Protocol 2,1
>#ListenAddress 0.0.0.0
>#ListenAddress ::
>
># HostKey for protocol version 1
>#HostKey /etc/ssh/ssh_host_key
># HostKeys for protocol version 2
>#HostKey /etc/ssh/ssh_host_rsa_key
>#HostKey /etc/ssh/ssh_host_dsa_key
>
># Lifetime and size of ephemeral version 1 server key
>#KeyRegenerationInterval 1h
>#ServerKeyBits 768
>
># Logging
>#obsoletes QuietMode and FascistLogging
>#SyslogFacility AUTH
>#LogLevel INFO
>
># Authentication:
>
>#LoginGraceTime 2m
>PermitRootLogin yes
>StrictModes yes
>#MaxAuthTries 6
>
>#RSAAuthentication yes
>#PubkeyAuthentication yes
>#AuthorizedKeysFile     .ssh/authorized_keys
>
># For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
>#RhostsRSAAuthentication no
># similar for protocol version 2
>#HostbasedAuthentication no
># Change to yes if you don't trust ~/.ssh/known_hosts for
># RhostsRSAAuthentication and HostbasedAuthentication
>#IgnoreUserKnownHosts no
># Don't read the user's ~/.rhosts and ~/.shosts files
>#IgnoreRhosts yes
>
># To disable tunneled clear text passwords, change to no here!
>#PasswordAuthentication yes
>#PermitEmptyPasswords no
>
># Change to no to disable s/key passwords
>#ChallengeResponseAuthentication yes
>
># Kerberos options
>#KerberosAuthentication no
>#KerberosOrLocalPasswd yes
>#KerberosTicketCleanup yes
>#KerberosGetAFSToken no
>
># GSSAPI options
>#GSSAPIAuthentication no
>#GSSAPICleanupCredentials yes
>
># Set this to 'yes' to enable PAM authentication, account processing,
># and session processing. If this is enabled, PAM authentication will
># be allowed through the ChallengeResponseAuthentication mechanism.
># Depending on your PAM configuration, this may bypass the setting of
># PasswordAuthentication, PermitEmptyPasswords, and
># "PermitRootLogin without-password". If you just want the PAM account and
># session checks to run without PAM authentication, then enable this but set
># ChallengeResponseAuthentication=no
>#UsePAM no
>
>#AllowTcpForwarding yes
>#GatewayPorts no
>X11Forwarding yes
>X11DisplayOffset 10
>XAuthLocation /usr/X11R6/bin/xauth
>#X11UseLocalhost yes
>#PrintMotd yes
>#PrintLastLog yes
>#TCPKeepAlive yes
>#UseLogin no
>#UsePrivilegeSeparation yes
>#PermitUserEnvironment no
>#Compression yes
>#ClientAliveInterval 0
>#ClientAliveCountMax 3
>#UseDNS yes
>#PidFile /var/run/sshd.pid
>#MaxStartups 10
>
># no default banner path
>#Banner /some/path
>
># override default of no subsystems
>Subsystem       sftp    /usr/libexec/openssh/sftp-server
>[root@xxxxxxxxx root]#

Actions: View

Attachments on bug 1004: 861 | 865 | 883