Re: Connection reset by peer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tom H wrote:
Furnish, Trever G wrote:
You didn't note where you did your capture (on the client, the server,
or some intermediary device).  Presuming that you did the capture on the
client, I'd do a similar capture on the server and verify that it's
really the server sending the rst.  Lots of firewalls send RSTs in both
directions to break connections.

I've managed to replicate this with 2 servers that are in the same vlan, plugged into the same switch. No firewall or suchlike causing the problem. It's very weird, I'm starting to suspect the Tigon drivers for the broadcom BCM5703 card. im going to switch back to the bcm driver and see if it make any difference.

However, I have 12 blades running exactly the same build of RHEL4 x86_64, and only 4 servers that are having the problem, and they are in different enclosures.

Unfortunately the "Connection reset by peer" error can mean about a zillion and one things. It is actually sent by glibc which doesn't help much either.

I was looking tht the emails and this line looks like you might be trying to start a process at the server end and it is failing:

debug1: Transferred: stdin 0, stdout 0, stderr 126 bytes in
 0.2 seconds

Did you check var log secure to make sure it isn't a permission, authentication, or PAM issue?

No IP conclicts?

No dupliate MAC addresses?

Cheers,

Tom






If it really does turn out that the server is sending an RST, then I'd
start the server with debugging output turned on and look for clues
there.
-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Tom H
Sent: Wednesday, May 09, 2007 4:58 PM
To: redhat-list@xxxxxxxxxx
Subject: ssh: Connection reset by peer

Hi,

I have a couple of RHEL4 which have started disconnecting me during ssh login after I enter the correct password;

"Read from remote host msweb01.test.ms.osti.local: Connection reset by peer Connection to msweb01.test.ms.osti.local closed."

I turned on -vvv debugging on the client and the relevant section is;

debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password txxxxxx@xxxxxxxxxxxxxxxxxxxxxxxxxx's password:
debug3: packet_send2: adding 48 (len 61 padlen 19 extra_pad 64)
debug2: we sent a password packet, wait for reply
debug1: Authentication succeeded (password).
debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Entering interactive session.
debug1: channel 0: free: client-session, nchannels 1
debug3: channel 0: status: The following connections are open:
  #0 client-session (t3 r-1 i0/0 o0/0 fd 4/5 cfd -1)

debug3: channel 0: close_fds r 4 w 5 e 6 c -1 Read from remote host msweb01.test.ms.osti.local: Connection reset by peer Connection to msweb01.test.ms.osti.local closed. debug1: Transferred: stdin 0, stdout 0, stderr 126 bytes in 0.2 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 703.9
debug1: Exit status -1


A tcpdump shows that the server is sending a RST, ACK to close the connection. The server debug logs has the following;


Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 46 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 3 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 4 used once, disabling now Apr 27 04:08:24 msweb01 sshd[13481]: debug2: monitor_read: 9 used once, disabling now
Apr 27 03:08:24 msweb01 sshd[13482]: debug1: userauth_banner: sent
Apr 27 03:08:24 msweb01 sshd[13482]: Failed none for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 03:08:27 msweb01 sshd[13482]: debug1: userauth-request for user txxxxxx service ssh-connection method password
Apr 27 03:08:27 msweb01 sshd[13482]: debug1: attempt 1 failures 1
Apr 27 03:08:27 msweb01 sshd[13482]: debug2: input_userauth_request: try method password Apr 27 04:08:27 msweb01 sshd[13481]: debug1: PAM: password authentication accepted for txxxxxx Apr 27 04:08:27 msweb01 sshd[13481]: Accepted password for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 03:08:27 msweb01 sshd[13482]: Accepted password for txxxxxx from 10.127.5.104 port 4460 ssh2 Apr 27 04:08:27 msweb01 sshd[13481]: debug1: monitor_child_preauth: txxxxxx has been authenticated by privileged process
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: mac_init: found hmac-md5
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: mac_init: found hmac-md5
Apr 27 04:08:27 msweb01 sshd[13481]: debug2: User child is on pid 13484
Apr 27 04:08:27 msweb01 sshd[13481]: debug1: do_cleanup
Apr 27 04:08:27 msweb01 sshd[13481]: debug1: PAM: cleanup



Any ideas on what might cause that?

Thanks,

Tom




--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list




--
Stephen Carville <stephen@xxxxxxxxxxxxxx>
Systems Engineer
Land America
1.626.667.1450 X326

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux