Package: xinetd
Version: 1:2.3.15-3
Severity: normal
Dear Maintainer,
I have been running sshd from xinetd with
service ssh
{
disable = no
socket_type = stream
wait = no
user = root
server = /usr/sbin/sshd
protocol = tcp
log_on_failure += USERID
only_from = 192.168.0.0/29 192.168.10.0/29
}
without problems for some years. This has recently stopped working: if a
("only_from") client tries to connect, something like this happens:
--------------------
$ ssh -vX ael@conquest2
OpenSSH_6.7p1 Debian-3, OpenSSL 1.0.1j 15 Oct 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to conquest2 [192.168.0.2] port 22.
debug1: Connection established.
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_rsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_dsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/ael/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-3
ssh_exchange_identification: read: Connection reset by peer
--------------------
Removing sshd from xinetd and running it standalone on this same machine
with no other changes solves the problem.
-- System Information:
Debian Release: 8.0
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
Versions of packages xinetd depends on:
ii libc6 2.19-13
ii libwrap0 7.6.q-25
ii netbase 5.3
ii update-inetd 4.43
Versions of packages xinetd recommends:
ii logrotate 3.8.7-1+b1
ii rsyslog [system-log-daemon] 8.4.2-1
xinetd suggests no packages.
-- Configuration Files:
/etc/default/xinetd changed:
INETD_COMPAT=No
XINETD_OPTS="-stayalive"
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
