ssh: Connection reset by peer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I have a couple of RHEL4 which have started disconnecting me during ssh login after I enter the correct password;

"Read from remote host msweb01.test.ms.osti.local: Connection reset by peer
Connection to msweb01.test.ms.osti.local closed."

I turned on -vvv debugging on the client and the relevant section is;

debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
txxxxxx@xxxxxxxxxxxxxxxxxxxxxxxxxx's password:
debug3: packet_send2: adding 48 (len 61 padlen 19 extra_pad 64)
debug2: we sent a password packet, wait for reply
debug1: Authentication succeeded (password).
debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Entering interactive session.
debug1: channel 0: free: client-session, nchannels 1
debug3: channel 0: status: The following connections are open:
 #0 client-session (t3 r-1 i0/0 o0/0 fd 4/5 cfd -1)

debug3: channel 0: close_fds r 4 w 5 e 6 c -1
Read from remote host msweb01.test.ms.osti.local: Connection reset by peer
Connection to msweb01.test.ms.osti.local closed.
debug1: Transferred: stdin 0, stdout 0, stderr 126 bytes in 0.2 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 703.9
debug1: Exit status -1


A tcpdump shows that the server is sending a RST, ACK to close the connection. The server debug logs has the following;


Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 46 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 3 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 4 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 9 used once, disabling now
Apr 27 03:08:24 msweb01 sshd[13482]: debug1: userauth_banner: sent
Apr 27 03:08:24 msweb01 sshd[13482]: Failed none for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 03:08:27 msweb01 sshd[13482]: debug1: userauth-request for user txxxxxx service ssh-connection method password
Apr 27 03:08:27 msweb01 sshd[13482]: debug1: attempt 1 failures 1
Apr 27 03:08:27 msweb01 sshd[13482]: debug2: input_userauth_request: try method password Apr 27 04:08:27 msweb01 sshd[13481]: debug1: PAM: password authentication accepted for txxxxxx Apr 27 04:08:27 msweb01 sshd[13481]: Accepted password for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 03:08:27 msweb01 sshd[13482]: Accepted password for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 04:08:27 msweb01 sshd[13481]: debug1: monitor_child_preauth: txxxxxx has been authenticated by privileged process
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: mac_init: found hmac-md5
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: mac_init: found hmac-md5
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: User child is on pid 13484
Apr 27 04:08:27 msweb01 sshd[13481]: debug1: do_cleanup
Apr 27 04:08:27 msweb01 sshd[13481]: debug1: PAM: cleanup



Any ideas on what might cause that?

Thanks,

Tom




--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux