OpenVZ Forum


Home » General » Support » *CLOSED* Refused connect from ipv6 using ssh
*CLOSED* Refused connect from ipv6 using ssh [message #10297] Wed, 14 February 2007 13:49 Go to next message
JimL is currently offline  JimL
Messages: 116
Registered: February 2007
Senior Member
This may not be entirely an openvz problem, except I've never had a system default to ipv6 before I started using openvz.

Host is fc6
Kernel is 2.6.18-ovz028test010.1-smp

guest is Ubuntu (6.10 I think, but not sure).

This chunk of the log explains what's happening.
Feb 14 13:35:14 walnut sshd[11643]: refused connect from ::ffff:192.168.2.102 (::ffff:192.168.2.102)
Feb 14 13:35:35 walnut sshd[11547]: (pam_unix) session closed for user june
Feb 14 13:36:04 walnut sshd[11650]: Accepted publickey for june
from 192.168.2.101 port 46839 ssh2


From a system that identifies itself as ipv4 I can get in, however from the openvz host it fails I think because it is a ipv6 host.

The error message I get from failed attempt to connect is:

ssh_exchange_identification: Connection closed by remote host

That's from a simple ssh 192.168.2.50

What's the best way to fix this problem?

Thanks,
Jim.

[Updated on: Tue, 20 February 2007 08:35] by Moderator

Report message to a moderator

Re: Refused connect from ipv6 using ssh [message #10299 is a reply to message #10297] Wed, 14 February 2007 14:25 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Hello,


First of all we need to check - is it OpenVZ related problem.
Please, reboot in FC6 default kernel and try to reach required hosts. Does it work?

Thanks.
Re: Refused connect from ipv6 using ssh [message #10376 is a reply to message #10299] Fri, 16 February 2007 13:44 Go to previous messageGo to next message
JimL is currently offline  JimL
Messages: 116
Registered: February 2007
Senior Member
I'll try, but the system I'm trying to ssh to is an openvz guest, so I'm not sure that will prove anything since I won't be able to ssh to the guest if openvz is not running.
Re: Refused connect from ipv6 using ssh [message #10379 is a reply to message #10376] Fri, 16 February 2007 14:10 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Stop, you sad in your initial post, that "from the openvz host it fails". But now you're saying that the problem in "openvz guest", not host.

So, what's the real problem? Smile

Thanks.
Re: Refused connect from ipv6 using ssh [message #10392 is a reply to message #10379] Sat, 17 February 2007 15:42 Go to previous messageGo to next message
JimL is currently offline  JimL
Messages: 116
Registered: February 2007
Senior Member
Base system (host) is running openvz kernel and is a FC6 system running:
Linux version 2.6.18-ovz028test010.1-smp (root@centos-32-build) (gcc version 3.4.4 20050721 (Red Hat 3.4.4-2)) #1 SMP Fri Dec 29 21:17:45 MSK 2006
IP = 192.168.2.102
Guest is Ubuntu
The attempt to ssh from FC6 to the guest(192.168.2.50) is unsuccessful due the previously mentioned error.

However ssh works fine when accessing .50 from any other system including, ubuntu and centos. Ssh works fine when accessing two different ubuntu hosts on the network and the centos system, which is a Xen guest from the FC6 system.

So as you can see booting a stock kernel won't prove anything unless I install FC6 openvz on another system.

Thanks,
Jim.
Re: Refused connect from ipv6 using ssh [message #10432 is a reply to message #10392] Mon, 19 February 2007 10:40 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Hello,

First of all I'd like to note that it's hard to understand you for me, because you use a bit odd terms. Smile Let me explain. Suppose we have _one_ hardware node with OpenVZ installed on it. It is often called host node. If there are VEs on this host node, they are often called guests. Smile
You don't specify do you create VEs or you don't, so as far as I understand at the moment, in your post "guest" means some other hardware node, that runs sshd server.

So you have the following situation:

1) There is a HN that runs OpenVZ kernel, but there is no VE on it. It runs FC6 distribution. This HN has IPv6 address ::ffff:192.168.2.102. Let's call this HN "OvzHN".

2) There is another HN with non-OpenVZ kernel, that runs sshd server. It runs Ubuntu. Its IP address is 192.168.2.50 (or IPv6?). Lets call this HN "server"

3) When you trying to get to "server" by ssh from "OvzHN", on "server" you have the following in /var/log/messages:

Feb 14 13:35:14 walnut sshd[11643]: refused connect from ::ffff:192.168.2.102 (::ffff:192.168.2.102)


4) From ipv4 systems you can get to "server" by ssh.

If what I described - is your situation, then restarting OvzHN into FC6 original server will reveal is it OpenVZ related problem or not. If it is not your situation, please describe it more clearly.

Thanks,
Vasily.
Re: Refused connect from ipv6 using ssh [message #10459 is a reply to message #10432] Mon, 19 February 2007 14:28 Go to previous messageGo to next message
JimL is currently offline  JimL
Messages: 116
Registered: February 2007
Senior Member
I'm sorry I'm not using the correct terms. When I say "host" I mean the system running the OpenVZ kernel, when I say "guest" I mean a system I have created/started on that host with the vzctl commands, what I think you have refered to a VE.

So I am on 192.168.2.102 and do the following:
vzctl set 1001 --ipadd 192.168.2.50 --save
vzctl start 1001
ssh 192.168.2.50

It fails with the previously mentioned error.

I also created/started a centos system VE. It is OK so the problem is with Ubuntu dapper.

I guess I need to ask on a Ubuntu list for help.

Thanks, I'll try to be more exact in my terminology in the future. I'm migrating from Xen/VMware and haven't gotten used to the new language.

Jim.
Re: Refused connect from ipv6 using ssh [message #10461 is a reply to message #10459] Mon, 19 February 2007 14:40 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Now, I think, I completely undestand you! Smile
And where did you get Ubuntu 6.10 template?
May be I'll download it and try later...

Thanks.
Re: Refused connect from ipv6 using ssh [message #10464 is a reply to message #10461] Mon, 19 February 2007 15:04 Go to previous message
JimL is currently offline  JimL
Messages: 116
Registered: February 2007
Senior Member
I'm pretty sure I followed the instructions here: http://wiki.openvz.org/Ubuntu_template

I wasn't smart enough then to do anything else. But then I'm not that much smarter now. Very Happy

Thanks,
Jim.
Previous Topic: 2 nics, 1st nic is private lan - I can't connect to the internet from VEs
Next Topic: *CLOSED* Error compiling 2.6.18-028test015.1
Goto Forum:
  


Current Time: Sat Aug 03 12:46:06 GMT 2024

Total time taken to generate the page: 0.02751 seconds