Bug 1887 - Failure to initiate 12+ simulateous connections using priv-key auth
Summary: Failure to initiate 12+ simulateous connections using priv-key auth
Status: CLOSED INVALID
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh (show other bugs)
Version: 5.5p1
Hardware: All Linux
: P2 normal
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-04-07 21:16 AEST by David Dick
Modified: 2011-09-06 15:32 AEST (History)
1 user (show)

See Also:


Attachments
Bourne Shell Script to reproduce issue (95 bytes, application/x-sh)
2011-04-07 21:16 AEST, David Dick
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description David Dick 2011-04-07 21:16:04 AEST
Created attachment 2026 [details]
Bourne Shell Script to reproduce issue

When rapidly starting a lot of ssh connections to remote hosts, the most that can be done is about 12 without running into odd error messages.  When running in verbose mode the log shows;

OpenSSH_5.5p1, OpenSSL 1.0.0d-fips 8 Feb 2011
debug1: Reading configuration data /home/dave/.ssh/config^M
debug1: Reading configuration data /etc/ssh/ssh_config^M
debug1: Applying options for *^M
debug2: ssh_connect: needpriv 0^M
debug1: Connecting to localhost [127.0.0.1] port 22.^M
debug1: Connection established.^M
debug2: key_type_from_name: unknown key type '-----BEGIN'^M
debug2: key_type_from_name: unknown key type 'Proc-Type:'^M
debug2: key_type_from_name: unknown key type 'DEK-Info:'^M
debug2: key_type_from_name: unknown key type '-----END'^M
debug1: identity file /home/dave/.ssh/id_rsa type 1^M
debug1: identity file /home/dave/.ssh/id_rsa-cert type -1^M
debug1: identity file /home/dave/.ssh/id_dsa type -1^M
debug1: identity file /home/dave/.ssh/id_dsa-cert type -1^M
ssh_exchange_identification: Connection closed by remote host

so the tcp connection seemingly gets made and then killed shortly afterwards.  Both the client log and the server log indicate that the other side closed the connection.  There is an example script attached to replicate the issue, it expects that a private key will be available via an agent.
Comment 1 Damien Miller 2011-04-08 15:57:49 AEST
You are almost certainly running into sshd's MaxStartups limit. Have a look at the documentation on this option in the sshd_config man page and adjust the limit in sshd_config to suit.
Comment 2 Damien Miller 2011-09-06 15:32:53 AEST
close resolved bugs now that openssh-5.9 has been released