*CLOSED* Refused connect from ipv6 using ssh
This may not be entirely an openvz problem, except I've never had a system default to ipv6 before I started using openvz. Host is fc6 Kernel is 2.6.18-ovz028test010.1-smp guest is Ubuntu (6.10 I think, but not sure). This chunk of the log explains what's happening. Feb 14 13:35:14 walnut sshd[11643]: refused connect from ::ffff:192.168.2.102 (::ffff:192.168.2.102) Feb 14 13:35:35 walnut sshd[11547]: (pam_unix) session closed for user june Feb 14 13:36:04 walnut sshd[11650]: Accepted publickey for june from 192.168.2.101 port 46839 ssh2 From a system that identifies itself as ipv4 I can get in, however from the openvz host it fails I think because it is a ipv6 host. The error message I get from failed attempt to connect is: ssh_exchange_identification: Connection closed by remote host That's from a simple ssh 192.168.2.50 What's the best way to fix this problem? Thanks, Jim.
Hello, First of all we need to check - is it OpenVZ related problem. Please, reboot in FC6 default kernel and try to reach required hosts. Does it work? Thanks.
I'll try, but the system I'm trying to ssh to is an openvz guest, so I'm not sure that will prove anything since I won't be able to ssh to the guest if openvz is not running.
Stop, you sad in your initial post, that "from the openvz host it fails". But now you're saying that the problem in "openvz guest", not host. So, what's the real problem? Thanks.
Base system (host) is running openvz kernel and is a FC6 system running: Linux version 2.6.18-ovz028test010.1-smp (root@centos-32-build) (gcc version 3.4.4 20050721 (Red Hat 3.4.4-2)) #1 SMP Fri Dec 29 21:17:45 MSK 2006 IP = 192.168.2.102 Guest is Ubuntu The attempt to ssh from FC6 to the guest(192.168.2.50) is unsuccessful due the previously mentioned error. However ssh works fine when accessing .50 from any other system including, ubuntu and centos. Ssh works fine when accessing two different ubuntu hosts on the network and the centos system, which is a Xen guest from the FC6 system. So as you can see booting a stock kernel won't prove anything unless I install FC6 openvz on another system. Thanks, Jim.
Hello, First of all I'd like to note that it's hard to understand you for me, because you use a bit odd terms. Let me explain. Suppose we have _one_ hardware node with OpenVZ installed on it. It is often called host node. If there are VEs on this host node, they are often called guests. You don't specify do you create VEs or you don't, so as far as I understand at the moment, in your post "guest" means some other hardware node, that runs sshd server. So you have the following situation: 1) There is a HN that runs OpenVZ kernel, but there is no VE on it. It runs FC6 distribution. This HN has IPv6 address ::ffff:192.168.2.102. Let's call this HN "OvzHN". 2) There is another HN with non-OpenVZ kernel, that runs sshd server. It runs Ubuntu. Its IP address is 192.168.2.50 (or IPv6?). Lets call this HN "server" 3) When you trying to get to "server" by ssh from "OvzHN", on "server" you have the following in /var/log/messages: Feb 14 13:35:14 walnut sshd[11643]: refused connect from ::ffff:192.168.2.102 (::ffff:192.168.2.102) 4) From ipv4 systems you can get to "server" by ssh. If what I described - is your situation, then restarting OvzHN into FC6 original server will reveal is it OpenVZ related problem or not. If it is not your situation, please describe it more clearly. Thanks, Vasily.
I'm sorry I'm not using the correct terms. When I say "host" I mean the system running the OpenVZ kernel, when I say "guest" I mean a system I have created/started on that host with the vzctl commands, what I think you have refered to a VE. So I am on 192.168.2.102 and do the following: vzctl set 1001 --ipadd 192.168.2.50 --save vzctl start 1001 ssh 192.168.2.50 It fails with the previously mentioned error. I also created/started a centos system VE. It is OK so the problem is with Ubuntu dapper. I guess I need to ask on a Ubuntu list for help. Thanks, I'll try to be more exact in my terminology in the future. I'm migrating from Xen/VMware and haven't gotten used to the new language. Jim.
Now, I think, I completely undestand you! And where did you get Ubuntu 6.10 template? May be I'll download it and try later... Thanks.
I'm pretty sure I followed the instructions here: http://wiki.openvz.org/Ubuntu_template I wasn't smart enough then to do anything else. But then I'm not that much smarter now. Thanks, Jim.