1 |
On Friday 15 February 2008, Florian Philipp wrote: |
2 |
> Hi list! |
3 |
> |
4 |
> For some time now, there's a very odd situation: There are two |
5 |
> computers, DAU and NOTE. |
6 |
> |
7 |
> I can use ssh to login from DAU to NOTE but not vice versa. I've |
8 |
> played around with several settings before this happened but I'm sure |
9 |
> it worked after my last change. |
10 |
> |
11 |
> Well, ultimately I've unmerged openssh, keychain and denyhosts on |
12 |
> both computers and removed /etc/ssh and .ssh in root's and the users' |
13 |
> home directories and then reemerged just openssh. |
14 |
|
15 |
Ah. You probably shouldn't have done that, unless you know for a fact |
16 |
that YOU screwed the ssh config up beyond all hope of recovery. |
17 |
Usually, you just sit with the same problem anyway, or make it worse by |
18 |
removing the configs that still work |
19 |
|
20 |
> Yet, the situation didn't change. |
21 |
> |
22 |
> Here's what happening: |
23 |
> |
24 |
> dsl@NOTE > ssh -vvv DAU |
25 |
> |
26 |
> OpenSSH_4.7p1-hpn12v19, OpenSSL 0.9.8g 19 Oct 2007 |
27 |
> debug1: Reading configuration data /etc/ssh/ssh_config |
28 |
> debug2: ssh_connect: needpriv 0 |
29 |
> debug1: Connecting to DAU [192.168.2.4] port 22. |
30 |
> debug1: Connection established. |
31 |
> debug1: identity file /home/dsl/.ssh/identity type -1 |
32 |
> debug1: identity file /home/dsl/.ssh/id_rsa type -1 |
33 |
> debug1: identity file /home/dsl/.ssh/id_dsa type -1 |
34 |
> ssh_exchange_identification: Connection closed by remote host |
35 |
> |
36 |
> dsl@DAU > tail /var/log/messages |
37 |
> |
38 |
> [...] |
39 |
> Feb 15 19:20:30 DAU sshd[6269]: refused connect from NOTE.xxx |
40 |
> (192.168.2.2) |
41 |
|
42 |
It's not a firewall, xinetd, tcpwrappers or denyhost problem :-) Your |
43 |
connection attempt was received by sshd which denied it. |
44 |
|
45 |
The information you gave is inadequate to answer your question, because |
46 |
I don't know how long a piece of string is. |
47 |
|
48 |
Post the complete contents of /etc/sshd/sshd_config on DAU and we can |
49 |
probably tell you why though |
50 |
|
51 |
|
52 |
-- |
53 |
Alan McKinnon |
54 |
alan dot mckinnon at gmail dot com |
55 |
|
56 |
-- |
57 |
gentoo-user@l.g.o mailing list |