OpenVZ Forum - RDF feed
type: channel
items: * SOLVED * FC6 Precreated VE and ssh
items: Re: FC6 Precreated VE and ssh
items: Re: * SOLVED * FC6 Precreated VE and ssh

* SOLVED * FC6 Precreated VE and ssh
type: item
description: Hi there i can't connect to ssh of the fc6 precreated VE this is an example... [root@calvin ~]# ssh root@calvin-fc6 root@calvin-fc6's password: Last login: Tue May 22 11:54:31 2007 from 172.21.17.10 Connection to calvin-fc6 closed. [root@calvin ~]# the connection closes after submitting a password.. is it a PAM problem ? thanks Gianni
creator: jean1971
date: 2007-05-22T12:46:13-00:00

Re: FC6 Precreated VE and ssh
type: item
description: can you vzctl enter the VE? If so, what does the ve syslog say?
creator: rickb
date: 2007-05-22T12:52:24-00:00

Re: FC6 Precreated VE and ssh
type: item
description: sure ... this is /var/log/secure May 22 14:42:29 calvin-fc6 sshd[3355]: Accepted password for root from 172.21.17.10 port 33667 ssh2 May 22 14:42:29 calvin-fc6 sshd[3355]: pam_unix(sshd:session): session opened for user root by (uid=0) May 22 14:42:29 calvin-fc6 sshd[3355]: pam_unix(sshd:session): session closed for user root messages says nothing... thanks Gianni
creator: jean1971
date: 2007-05-22T13:38:21-00:00

Re: FC6 Precreated VE and ssh
type: item
description: strace -ff `pidof sshd` duplicate problem paste strace output here.
creator: rickb
date: 2007-05-22T13:41:30-00:00

Re: FC6 Precreated VE and ssh
type: item
description: i think there's a different syntax [root@calvin-fc6 log]# pidof sshd 2444 [root@calvin-fc6 log]# /usr/bin/strace -ff `pidof sshd` /usr/bin/strace: 2444: command not found can you help me Thanks Gianni
creator: jean1971
date: 2007-05-22T13:52:41-00:00

Re: FC6 Precreated VE and ssh
type: item
description: strace is not installed. to install: yum -y install strace
creator: rickb
date: 2007-05-22T14:00:11-00:00

Re: FC6 Precreated VE and ssh
type: item
description: i don't think so... [root@calvin ~]# vzctl enter 101 entered into VE 101 [root@calvin-fc6 /]# strace usage: strace [-dffhiqrtttTvVxx] [-a column] [-e expr] ... [-o file] [-p pid] ... [-s strsize] [-u username] [-E var=val] ... [command [arg ...]] or: strace -c [-e expr] ... [-O overhead] [-S sortby] [-E var=val] ... [command [arg ...]] -c -- count time, calls, and errors for each syscall and report summary -f -- follow forks, -ff -- with output into separate files -F -- attempt to follow vforks, -h -- print help message -i -- print instruction pointer at time of syscall -q -- suppress messages about attaching, detaching, etc. -r -- print relative timestamp, -t -- absolute timestamp, -tt -- with usecs -T -- print time spent in each syscall, -V -- print version -v -- verbose mode: print unabbreviated argv, stat, termio[s], etc. args -x -- print non-ascii strings in hex, -xx -- print all strings in hex -a column -- alignment COLUMN for printing syscall results (default 40) -e expr -- a qualifying expression: option=[!]all or option=[!]val1[,val2]... options: trace, abbrev, verbose, raw, signal, read, or write -o file -- send trace output to FILE instead of stderr -O overhead -- set overhead for tracing syscalls to OVERHEAD usecs -p pid -- trace process with process id PID, may be repeated -s strsize -- limit length of print strings to STRSIZE chars (default 32) -S sortby -- sort syscall counts by: time, calls, name, nothing (default time) -u username -- run command as username handling setuid and/or setgid -E var=val -- put var=val in the environment for command -E var -- remove var from the environment for command [root@calvin-fc6 /]# strace -ff `pidof sshd` strace: 2444: command not found i tried this... [root@calvin-fc6 /]# strace -ff sshd execve("/usr/sbin/sshd", ["sshd"], [/* 17 vars */]) = 0 brk(0) = 0x80062000 uname({sys="Linux", node="calvin-fc6", ...}) = 0 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDO…
creator: jean1971
date: 2007-05-22T14:07:26-00:00

Re: FC6 Precreated VE and ssh
type: item
description: strace -ff -p `pidof sshd` final answer
creator: rickb
date: 2007-05-22T17:56:01-00:00

Re: FC6 Precreated VE and ssh
type: item
description: are you sure ? [root@calvin ~]# service vz status OpenVZ is running... [root@calvin ~]# vzlist VE not found [root@calvin ~]# vzlist 101 VEID NPROC STATUS IP_ADDR HOSTNAME 101 - stopped 172.21.17.31 calvin-fc6 [root@calvin ~]# vzstart 101 -bash: vzstart: command not found [root@calvin ~]# vzctl start 101 Starting VE ... VE is mounted Adding IP address(es): 172.21.17.31 Setting CPU units: 1000 Set hostname: calvin-fc6 VE start in progress... [root@calvin ~]# vzlist 101 VEID NPROC STATUS IP_ADDR HOSTNAME 101 11 running 172.21.17.31 calvin-fc6 [root@calvin ~]# vzctl enter 101 entered into VE 101 [root@calvin-fc6 /]# strace -ff -p `pidof sshd` attach: ptrace(PTRACE_ATTACH, ...): No such process [root@calvin-fc6 /]# service sshd status sshd (pid 351) is running... [root@calvin-fc6 /]# pidof sshd 351 [root@calvin-fc6 /]# strace -ff -p 351 attach: ptrace(PTRACE_ATTACH, ...): No such process [root@calvin-fc6 /]# thanks Gianni
creator: jean1971
date: 2007-05-23T07:54:00-00:00

Re: FC6 Precreated VE and ssh
type: item
description: the strace syntax is correct, i suspect "pidof" is not. "ps ax | grep sshd", does it show 351 or the same pid that pidof does?
creator: rickb
date: 2007-05-23T09:19:45-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin-fc6 /]# pidof sshd 351 [root@calvin-fc6 /]# ps aux | grep sshd root 351 0.0 0.0 5184 928 ? Ss 08:36 0:00 /usr/sbin/sshd root 556 0.0 0.0 1800 496 pts/0 R+ 10:27 0:00 grep sshd [root@calvin-fc6 /]# Thanks Gianni
creator: jean1971
date: 2007-05-23T09:44:03-00:00

Re: FC6 Precreated VE and ssh
type: item
description: Could you please show all output of: echo; \ echo "----------------------------------------"; \ echo "------ id ------"; \ id; \ echo "------ /proc/user_beancounters ------"; \ echo "---cut here--- {"; \ cat /proc/user_beancounters; \ echo "---cut here--- }"; \ echo "------ ll ~/.ssh/ ------"; \ ll ~/.ssh/; \ echo "------ cat /etc/ssh/sshd_config ------"; \ echo "---cut here--- {"; \ cat /etc/ssh/sshd_config; \ echo "---cut here--- }"; \ echo "------ cat /etc/hosts.allow ------"; \ echo "---cut here--- {"; \ cat /etc/hosts.allow; \ echo "---cut here--- }"; \ echo "----------------------------------------"; \ echo
creator: morik
date: 2007-05-23T10:30:59-00:00

Re: FC6 Precreated VE and ssh
type: item
description: ---------------------------------------- ------ id ------ uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(whe el) ------ /proc/user_beancounters ------ ---cut here--- { Version: 2.5 uid resource held maxheld barrier limit failcnt 101: kmemsize 912166 1053618 2752512 2936012 0 lockedpages 0 0 32 32 0 privvmpages 3665 9818 49152 53575 0 shmpages 31 31 8192 8192 0 dummy 0 0 0 0 0 numproc 16 19 65 65 0 physpages 2252 2767 0 2147483647 0 vmguarpages 0 0 6144 2147483647 0 oomguarpages 2252 2767 6144 2147483647 0 numtcpsock 4 4 80 80 0 numflock 5 6 100 110 0 numpty 1 1 16 16 0 numsiginfo 0 3 256 256 0 tcpsndbuf 0 0 319488 524288 0 tcprcvbuf 0 0 319488 524288 0 othersockbuf 8944 22360 132096 336896 0 dgramrcvbuf 0 8380 132096 132096 0 numothersock 9 16 80 80 0 dcachesize 0 0 1048576 1097728 0 numfile 439 503 2048 2048 0 dummy 0 0 0 0 0 dummy 0 0 0 0 0 dummy 0 0 0 0 0 numiptent 0 0 128 128 0 ---cut here--- } ------ ll ~/.ssh/ ------ pippo.sh: line 10: ll: command not found ------ cat /etc/ssh/sshd_config ------ ---cut here--- { # $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. # This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. #Port 22 #Protocol 2,1 Protocol 2 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: # HostKey for protocol version 1 #HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 #HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 1h #ServerKeyBits 768 # Logging # obsoletes QuietMode and FascistLogging #SyslogFacility AUTH SyslogFacility AUTHPRIV #LogLevel INFO # Authentica…
creator: jean1971
date: 2007-05-23T10:48:03-00:00

Re: FC6 Precreated VE and ssh
type: item
description: ok, and output of this: echo; echo "------------------------------------------------"; \ echo "------------ id ------------"; \ id; \ echo "------------ cat /etc/pam.d/sshd ------------"; \ [ -r /etc/pam.d/sshd ] && cat /etc/pam.d/sshd; \ echo "------------ ls -l ~/.ssh/ ------------"; \ ls -l ~/.ssh/; \ echo "------------ cat ~/.bashrc ------------"; \ cat ~/.bashrc; \ echo "------------ cat ~/.bash_profile ------------"; \ cat ~/.bash_profile; \ echo "------------ cat /etc/securetty ------------"; \ cat /etc/securetty; \ echo "------------------------------------------------"; \ echo
creator: morik
date: 2007-05-23T11:16:52-00:00

Re: FC6 Precreated VE and ssh
type: item
description: ------------------------------------------------ ------------ id ------------ uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(whe el) ------------ cat /etc/pam.d/sshd ------------ #%PAM-1.0 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session optional pam_keyinit.so force revoke session include system-auth session required pam_loginuid.so ------------ ls -l ~/.ssh/ ------------ total 4 -rw-r--r-- 1 root root 398 May 21 17:11 known_hosts ------------ cat ~/.bashrc ------------ # .bashrc # User specific aliases and functions alias rm='rm -i' alias cp='cp -i' alias mv='mv -i' # Source global definitions if [ -f /etc/bashrc ]; then . /etc/bashrc fi ------------ cat ~/.bash_profile ------------ # .bash_profile # Get the aliases and functions if [ -f ~/.bashrc ]; then . ~/.bashrc fi # User specific environment and startup programs PATH=$PATH:$HOME/bin export PATH unset USERNAME ------------ cat /etc/securetty ------------ console vc/1 vc/2 vc/3 vc/4 vc/5 vc/6 vc/7 vc/8 vc/9 vc/10 vc/11 tty1 tty2 tty3 tty4 tty5 tty6 tty7 tty8 tty9 tty10 tty11 ------------------------------------------------ [root@calvin-fc6 /]#
creator: jean1971
date: 2007-05-23T11:40:17-00:00

Re: FC6 Precreated VE and ssh
type: item
description: thanks, Is your sshd from rpm or it was built custom? also, you should uncomment next line: "PermitRootLogin yes" in your /etc/ssh/sshd_config file and restart sshd server (# service sshd restart) Regards, Roman.
creator: morik
date: 2007-05-23T11:55:35-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin-fc6 /]# ne /etc/ssh/sshd_config [root@calvin-fc6 /]# service sshd restart Stopping sshd: [ OK ] Starting sshd: [ OK ] [root@calvin-fc6 /]# exit logout exited from VE 101 [root@calvin ~]# ssh root@172.21.17.31 root@172.21.17.31's password: Permission denied, please try again. root@172.21.17.31's password: Last login: Tue May 22 14:42:29 2007 from 172.21.17.10 Connection to 172.21.17.31 closed. ------------------------------------------------------------ ------ i took the image from http://download.openvz.org/template/precreated/fedora-core-6 -i686-default.tar.gz I made a yum to update the packets Thanks Gianni
creator: jean1971
date: 2007-05-23T12:03:22-00:00

Re: FC6 Precreated VE and ssh
type: item
description: don't give up, continue investigation echo; \ echo "---------------------------------------"; \ echo "------- cat /etc/nologin ------"; \ [ -r /etc/nologin ] && cat /etc/nologin; \ echo "------- cat /etc/ssh/denyusers ------"; \ [ -r /etc/ssh/denyusers ] && cat /etc/ssh/denyusers; \ echo "------- dmesg | grep -i selinux ------"; \ dmesg | grep -i selinux; \ echo "---------------------------------------"; \ echo
creator: morik
date: 2007-05-23T12:08:12-00:00

Re: FC6 Precreated VE and ssh
type: item
description: there aren't file like these --------------------------------------- ------- cat /etc/nologin ------ ------- cat /etc/ssh/denyusers ------ ------- dmesg | grep -i selinux ------ ---------------------------------------
creator: jean1971
date: 2007-05-23T12:14:29-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin ~]# ssh root@calvin-fc6 "pwd;ps -Af;ls -l;"
creator: morik
date: 2007-05-23T12:21:34-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin ~]# ssh root@calvin-fc6 "pwd;ps -Af;ls -l;" root@calvin-fc6's password: [root@calvin ~]# ssh root@calvin-fc6 "pwd;ps -Af;ls -l;" root@calvin-fc6's password: [root@calvin ~]# ssh root@calvin-fc6 root@calvin-fc6's password: Last login: Wed May 23 13:58:09 2007 from 172.21.17.10 Connection to calvin-fc6 closed. [root@calvin ~]#
creator: jean1971
date: 2007-05-23T12:34:41-00:00

Re: FC6 Precreated VE and ssh
type: item
description: *ON VE* echo; \ grep "^root" /etc/passwd; \ ls -l /bin/bash; \ ls -l /bin/sh; \ echo;
creator: morik
date: 2007-05-23T12:40:59-00:00

Re: FC6 Precreated VE and ssh
type: item
description: root:x:0:0:root:/root:/bin/bash -rwxr-xr-x 1 root root 716972 Jul 12 2006 /bin/bash lrwxrwxrwx 1 root root 4 May 21 16:24 /bin/sh -> bash
creator: jean1971
date: 2007-05-23T12:42:29-00:00

Re: FC6 Precreated VE and ssh
type: item
description: rpm -qV openssh-server bash util-linux
creator: morik
date: 2007-05-23T12:47:50-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin-fc6 /]# rpm -qV openssh-server bash util-linux S.5....T c /etc/ssh/sshd_config !!!! is there no Bash installed ???
creator: jean1971
date: 2007-05-23T12:52:36-00:00

Re: FC6 Precreated VE and ssh
type: item
description: -------------- >!!!! >is there no Bash installed ??? all ok, bash installed "rpm -qV" show modified files for package. (it look at checksum) >root:x:0:0:root:/root:/bin/bash >-rwxr-xr-x 1 root root 716972 Jul 12 2006 /bin/bash >lrwxrwxrwx 1 root root 4 May 21 16:24 /bin/sh -> bash >[root@calvin-fc6 /]# rpm -qV openssh-server bash util-linux >S.5....T c /etc/ssh/sshd_config -------------- ls -l /dev/pty* | head -n 5
creator: morik
date: 2007-05-23T12:59:02-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin-fc6 /]# ls -l /dev/pty* | head -n 5 crw-rw-rw- 1 root tty 2, 176 Apr 13 2006 /dev/ptya0 crw-rw-rw- 1 root tty 2, 177 Apr 13 2006 /dev/ptya1 crw-rw-rw- 1 root tty 2, 178 Apr 13 2006 /dev/ptya2 crw-rw-rw- 1 root tty 2, 179 Apr 13 2006 /dev/ptya3 crw-rw-rw- 1 root tty 2, 180 Apr 13 2006 /dev/ptya4 [root@calvin-fc6 /]#
creator: jean1971
date: 2007-05-23T13:01:31-00:00

Re: FC6 Precreated VE and ssh
type: item
description: *ON HW NODE* echo; \ echo "------ lsmod | grep slm ------"; \ lsmod | grep slm; \ echo "------ dmesg ------"; \ dmesg; \ echo;
creator: morik
date: 2007-05-23T13:03:35-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin ~]# ------ lsmod | grep slm ------ ------ dmesg ------ Linux version 2.6.20-ovz005.1 (root@centos-32-build) (gcc version 3.4.4 20050721 (Red Hat 3.4.4-2)) #1 SMP Thu Apr 19 15:14:08 MSD 2007 BIOS-provided physical RAM map: sanitize start sanitize end copy_e820_map() start: 0000000000000000 size: 000000000009fc00 end: 000000000009fc00 type: 1 copy_e820_map() type is E820_RAM copy_e820_map() start: 000000000009fc00 size: 0000000000000400 end: 00000000000a0000 type: 2 copy_e820_map() start: 00000000000f0000 size: 0000000000010000 end: 0000000000100000 type: 2 copy_e820_map() start: 0000000000100000 size: 000000003fef0000 end: 000000003fff0000 type: 1 copy_e820_map() type is E820_RAM copy_e820_map() start: 000000003fff0000 size: 0000000000003000 end: 000000003fff3000 type: 4 copy_e820_map() start: 000000003fff3000 size: 000000000000d000 end: 0000000040000000 type: 3 copy_e820_map() start: 00000000ffb00000 size: 0000000000500000 end: 0000000100000000 type: 2 BIOS-e820: 0000000000000000 - 000000000009fc00 (usable) BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved) BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved) BIOS-e820: 0000000000100000 - 000000003fff0000 (usable) BIOS-e820: 000000003fff0000 - 000000003fff3000 (ACPI NVS) BIOS-e820: 000000003fff3000 - 0000000040000000 (ACPI data) BIOS-e820: 00000000ffb00000 - 0000000100000000 (reserved) 127MB HIGHMEM available. 896MB LOWMEM available. Entering add_active_range(0, 0, 262128) 0 entries of 256 used Zone PFN ranges: DMA 0 -> 4096 Normal 4096 -> 229376 HighMem 229376 -> 262128 early_node_map[1] active PFN ranges 0: 0 -> 262128 On node 0 totalpages: 262128 DMA zone: 36 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4060 pages, LIFO batch:0 Normal zone: 1980 pages used for memmap Normal zone: 223300 pages, LIFO batch:31 HighMem zone: 287 pages used for memmap HighMem zone: 32465 pages, LIFO batch:7 DMI 2.3 present. Using APIC driver default ACPI: RSDP (v000 IntelR ) @ 0x000f68a0 ACPI: R…
creator: jean1971
date: 2007-05-23T13:05:39-00:00

Re: FC6 Precreated VE and ssh
type: item
description: * from VE * 1) please create non superuser user on VE and try to use it name for connect. 2) please try to connect to localhost from VE (from VE: ssh root@localhost and non_su_user@localhost) I smoke and thinking come back in 7 min.
creator: morik
date: 2007-05-23T13:11:35-00:00

Re: FC6 Precreated VE and ssh
type: item
description: - non superuser [root@calvin ~]# ssh gia_bass@172.21.17.31 gia_bass@172.21.17.31's password: Last login: Tue May 22 14:25:59 2007 from 172.21.17.10 Connection to 172.21.17.31 closed. [root@calvin ~]# - from localhost (seems ok) [root@calvin-fc6 /]# ssh root@localhost root@localhost's password: Last login: Wed May 23 15:19:15 2007 from calvin-fc6 [root@calvin-fc6 ~]# who root pts/1 May 23 15:19 (calvin-fc6) [root@calvin-fc6 ~]#
creator: jean1971
date: 2007-05-23T13:21:36-00:00

Re: FC6 Precreated VE and ssh
type: item
description: good, *FROM HW* ip a l ip r l *FROM VE* ip a l ip r l try to update your /etc/ssh/sshd_config and restart sshd service: ------------------ UsePAM no UsePrivilegeSeparation yes ------------------ >- non superuser > >[root@calvin ~]# ssh gia_bass@172.21.17.31 >gia_bass@172.21.17.31's password: >Last login: Tue May 22 14:25:59 2007 from 172.21.17.10 >Connection to 172.21.17.31 closed. >[root@calvin ~]# > >- from localhost (seems ok) >[root@calvin-fc6 /]# ssh root@localhost >root@localhost's password: >Last login: Wed May 23 15:19:15 2007 from calvin-fc6 >[root@calvin-fc6 ~]# who >root pts/1 May 23 15:19 (calvin-fc6) >[root@calvin-fc6 ~]#
creator: morik
date: 2007-05-23T13:29:40-00:00

Re: FC6 Precreated VE and ssh
type: item
description: from HW [root@calvin ~]# ip a l 2: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 4: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 00:30:48:51:01:c7 brd ff:ff:ff:ff:ff:ff 6: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 00:30:48:51:01:c6 brd ff:ff:ff:ff:ff:ff 8: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:0a:5e:1a:35:cd brd ff:ff:ff:ff:ff:ff inet 172.21.17.10/19 brd 172.21.31.255 scope global eth2 inet6 fe80::20a:5eff:fe1a:35cd/64 scope link valid_lft forever preferred_lft forever 1: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue link/void from VE [root@calvin-fc6 /]# ip a l 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 3: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue link/void inet 127.0.0.1/32 scope host venet0 inet 172.21.17.31/32 brd 172.21.17.31 scope global venet0:0 in VE I changed /etc/ssh/sshd_config and restarted [root@calvin ~]# ssh root@172.21.17.31 root@172.21.17.31's password: Last login: Wed May 23 15:19:35 2007 from calvin-fc6 Connection to 172.21.17.31 closed. [root@calvin ~]#
creator: jean1971
date: 2007-05-23T13:43:21-00:00

Re: FC6 Precreated VE and ssh
type: item
description: * FROM HW* ip r l * FROM VE* ip r l
creator: morik
date: 2007-05-23T13:45:59-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin ~]# ip r l 172.21.17.31 dev venet0 scope link 172.21.0.0/19 dev eth2 proto kernel scope link src 172.21.17.10 169.254.0.0/16 dev eth2 scope link default via 172.21.1.1 dev eth2 [root@calvin ~]# vzctl enter 101 entered into VE 101 [root@calvin-fc6 /]# ip r l 192.0.2.0/24 dev venet0 scope host 169.254.0.0/16 dev venet0 scope link default via 192.0.2.1 dev venet0 [root@calvin-fc6 /]#
creator: jean1971
date: 2007-05-23T13:47:18-00:00

Re: FC6 Precreated VE and ssh
type: item
description: *FROM HW* cat /etc/ssh/ssh_config
creator: morik
date: 2007-05-23T13:49:45-00:00

Re: FC6 Precreated VE and ssh
type: item
description: if it can be useful on the same Hw I have FC5 and centos 5 that are working exited from VE 101 [root@calvin ~]# cat /etc/ssh/ssh_config # $OpenBSD: ssh_config,v 1.21 2005/12/06 22:38:27 reyk Exp $ # This is the ssh client system-wide configuration file. See # ssh_config(5) for more information. This file provides defaults for # users, and the values can be changed in per-user configuration files # or on the command line. # Configuration data is parsed as follows: # 1. command line options # 2. user-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for some commonly used options. For a comprehensive # list of available options, their meanings and defaults, please see the # ssh_config(5) man page. # Host * # ForwardAgent no # ForwardX11 no # RhostsRSAAuthentication no # RSAAuthentication yes # PasswordAuthentication yes # HostbasedAuthentication no # BatchMode no # CheckHostIP yes # AddressFamily any # ConnectTimeout 0 # StrictHostKeyChecking ask # IdentityFile ~/.ssh/identity # IdentityFile ~/.ssh/id_rsa # IdentityFile ~/.ssh/id_dsa # Port 22 # Protocol 2,1 # Cipher 3des # Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192- cbc,aes256-cbc # EscapeChar ~ # Tunnel no # TunnelDevice any:any # PermitLocalCommand no Host * GSSAPIAuthentication yes # If this option is set to yes then remote X11 clients will have full access # to the original X11 display. As virtually no X11 client supports the untrusted # mode correctly we set this to yes. ForwardX11Trusted yes # Send locale-related environment variables SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT SendEnv LC_IDENTIFICATION LC_ALL [root@calvin ~]#
creator: jean1971
date: 2007-05-23T13:53:55-00:00

Re: FC6 Precreated VE and ssh
type: item
description: try connect again from HW -> VE as root, but please add -vvv for ssh *FROM HW* ssh -vvv root@172.21.17.31
creator: morik
date: 2007-05-23T14:03:29-00:00

Re: FC6 Precreated VE and ssh
type: item
description: [root@calvin ~]# ssh -vvv root@172.21.17.31 OpenSSH_4.3p2, OpenSSL 0.9.8b 04 May 2006 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to 172.21.17.31 [172.21.17.31] port 22. debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3 debug1: match: OpenSSH_4.3 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_4.3 debug2: fd 3 setting O_NONBLOCK debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sh a1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcf our256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcf our256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sh a1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,b…
creator: jean1971
date: 2007-05-23T14:07:51-00:00

Re: FC6 Precreated VE and ssh
type: item
description: hm.. It is very strange, looks like all ok, could you please upgrade openssh-server on your VE, if it is last version, then downgrade it on previous version I will thinking about it problem and keep you updated. Now I go home. Thank you for assistance. Regards, Roman.
creator: morik
date: 2007-05-23T14:30:28-00:00

Re: FC6 Precreated VE and ssh
type: item
description: thanks... Bye Gianni
creator: jean1971
date: 2007-05-23T14:34:31-00:00

Re: FC6 Precreated VE and ssh
type: item
description: I have just a next lines in my sshd_config: -------- start of file -------- SyslogFacility AUTHPRIV PasswordAuthentication yes ChallengeResponseAuthentication no UsePAM yes Subsystem sftp /usr/libexec/openssh/sftp-server -------- end of file -------- and it's works fine. I saw some topics about problems with connects when GSSAPI is enabled but I don't think what it is your case. So, at this moment only one way come to my mind it is reinstall openssh-server on old version. Maybe it is not best way, but it can help to resolve problem.
creator: morik
date: 2007-05-23T14:59:54-00:00

Re: FC6 Precreated VE and ssh
type: item
description: IT WORKS !!!!!!!!! you're great !!! GREAT Thanks : Gianni
creator: jean1971
date: 2007-05-23T15:09:14-00:00

Re: FC6 Precreated VE and ssh
type: item
description: Glad to hear it! : )
creator: morik
date: 2007-05-23T15:14:55-00:00

Re: FC6 Precreated VE and ssh
type: item
description: Dear Gianni, if it is works now, could you please mark it as solved, please. Thank you, Roman.
creator: morik
date: 2007-05-23T19:45:10-00:00

Re: * SOLVED * FC6 Precreated VE and ssh
type: item
description: I had the same problem: ahuxley@pc012939$ ssh root@loofah pwd ahuxley@pc012939$ After the posting of a very cut-down /etc/ssh/sshd_config above, I started stripping stuff out of the full version in order to see what the problem was. And amazingly, it was the 'AcceptEnv' statements! So fix #1 on the ssh client: ahuxley@pc012939$ unset LC_ALL ahuxley@pc012939$ or, alternatively, fix #2 on the ssh server: [root@loofah ssh]# perl -pi -e 's/^(AcceptEnv)/#$1/' /etc/ssh/sshd_config [root@loofah ssh]# /etc/init.d/sshd restart Stopping sshd: [ OK ] Starting sshd: [ OK ] [root@loofah ssh]# I suspect that the "right" fix is to set up the locales correctly on the server. I imagine (but didn't check) that the stripped down FC6 template is missing some of this. Alexis (PS just posting here 'cos I thought this would be useful for all of you. If you want to ask further questions then I'm unlikely to see it if posted here. Mail me at ahuxley at gmx dot net.)
creator: ahuxley
date: 2007-06-13T16:22:13-00:00