------------------------------
Message: 10
Date: Tue, 4 Feb 2020 10:34:37 -0600
From: Bruce Dubbs <[email protected]>
To: [email protected]
Subject: Re: [blfs-support] Openssh cuts connection immediately
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8; format=flowed
On 2/4/20 5:29 AM, Herbert Laubner via blfs-support wrote:
Hello together,
I have set up a PC using jhalfs with SVN-20200201. This is not the
first time installing LFS for me.
Base is a raid made with BTRFS in MSDOS-Mode. After the base
system was setup (fixed fstab, kernel 5.5.1 compiled with btrfs,
grub ) I installed still in changeroot
- Lynx with zip/unzip/shareutils
- DHCPCD
- Sudo with LinuxPam(rebuild shadow)
- Openssh with Pam-configuration
- wget (after libtasn/p11kit/make-ca)
Lynx, wget are working, sudo is working, ssh from that PC towards
other PC's in my network are working fine.
Connecting from another PC onto the LFS-PC fails. The cennection
gets established and shuts down right away again.
On the LFS system, try running 'sshd -D -dd' to debug things from
the server side. I suspect a configuration issue but cannot be sure.
-- Bruce
------------------------------
Message: 11
Date: Tue, 4 Feb 2020 18:07:22 +0000
From: Ken Moffat <[email protected]>
To: BLFS Support List <[email protected]>
Subject: Re: [blfs-support] Openssh cuts connection immediately
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8
On Tue, Feb 04, 2020 at 04:59:38PM +0530, Herbert Laubner via
blfs-support wrote:
Hello together,
I have set up a PC using jhalfs with SVN-20200201. This is not the
first
time installing LFS for me.
glibc-2.31, I think ?
I saw something about openssh and that yesterday, somewhere. Ah
yes, at the bottom of https://lwn.net/Articles/811275/#Comments
(that might be subscribers only at the moment so I'll quote) - "it
might be useful to know that the current OpenSSH (8.1p1) needs some
patches backported to update the system call filter - grab the last
few from here. Without those, it'll just close the connection when
you try to log in, as nanosleep causes a SIGSYS. Otherwise it all
seems to work well so far!"
And 'here' is a link to
https://github.com/openssh/openssh-portable/commits/master/sandbox-seccomp-filter.c
I'm not sure, but I'll guess perhaps latest back as far as Nov 13th,
or maybe not all of those. Unfortunately, I'm not running
glibc-2.31 at the moment (looking for pre-existing problems, so I
can distinguish them from glibc-related).
If you patch it successfully, please let us know and provide the
patch. Thanks.
ĸen
--
We had folksingers in the lower bar for six months back home where
I worked. In the end we had to get a man in with a ferret.
Polly, in "Interesting Times"
Thank you for that link "https://lwn.net/Articles/811275/#Comments";
beside beeing entertaining, i got the point.
I starrted yesterday a re-install, i was not completly happy with the
btrfs-setup. I will come to the same point tonight and will apply the
change manually (I am not very familiar with providing patches). Will
report on success.
To Bruce: With 'sshd -D -dd'I did not learn more. I saw similar outputs
on the server site as on the user side. Right after the established
connection the closing. So I assume the point from Ken hits it.
Herbert
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
