Bug#323746: ssh-krb5: connection aborts with protocol error: didn't expect packet type 34

2005-11-30 Thread Dr A V Le Blanc 
On the advice of Dave Love from Daresbury, and with some extra help,
we have been able to use ssh-4.2 from testing, backported to sarge,
without any difficulties, and so we are replacing ssh-krb5 on all
machines.  Since I presume this will be the action most people will
want to take, I'm willing to see this bug closed as no longer relevant.

 -- Owen
 [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323746: ssh-krb5: connection aborts with protocol error: didn't expect packet type 34

2005-10-14 Thread Jason Martens 
I am also having this problem, and my machines are also running NTP, so
the time is almost identical on them.  Has there been some resolution to
this problem?  I am also able to log in if I destroy my tickets and use
an authorized_key or keyboard-interactive. I get this in my auth.log
when the login fails:

Oct 14 11:00:54 hostname sshd[17082]: fatal: accept_ctx died

Has there been any resolution to this issue yet?

Jason 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323746: ssh-krb5: connection aborts with protocol error: didn't expect packet type 34

2005-09-23 Thread Dr A V Le Blanc 
On Thu, Sep 22, 2005 at 06:10:19PM -0700, Russ Allbery wrote:
 In my experience, this is pretty much always caused by clock skew between
 the systems.  Have you checked the system clocks and made sure that
 they're within a few minutes of each other?

Thanks for the suggestion, but they're all running ntp, and all
within considerably less than a second of each other.  I've
noticed that there are some odd effects about ssh-krb5; it doesn't
work as I would expect.  (We have been using an older ssh, heavily
patched, to support passing AFS tokens.  I've tried to move to
ssh-krb5 when we changed from the kaserver to heimdal recently.)
In the end, I have had to give up on three machines, all of which
need to have their hostnames (i.e., what you get when you give
the hostname command) set to something other than the hostname;
they all have more than one IP address for various reasons, and
I suspect the problem may be related to this.

 -- Owen
 [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323746: ssh-krb5: connection aborts with protocol error: didn't expect packet type 34

2005-09-22 Thread Russ Allbery 
Dr A V Le Blanc [EMAIL PROTECTED] [EMAIL PROTECTED] writes:

 The problem occurs when I run ssh on a client with this package
 installed, trying to connect to two servers with this package installed.
 When I give the command 'ssh hostname', with or without various
 combinations of arguments, I get the response

  Disconnecting: Protocol error: didn't expect packet type 34

In my experience, this is pretty much always caused by clock skew between
the systems.  Have you checked the system clocks and made sure that
they're within a few minutes of each other?

The error message leaves a lot to be desired, I realize.

-- 
Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#323746: ssh-krb5: connection aborts with protocol error: didn't expect packet type 34

2005-08-18 Thread Dr A V Le Blanc [EMAIL PROTECTED] 
Package: ssh-krb5
Version: 3.8.1p1-7
Severity: normal



-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.12.3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages ssh-krb5 depends on:
ii  adduser3.63  Add and remove users and groups
ii  debconf1.4.30.13 Debian configuration management sy
ii  libc6  2.3.2.ds1-22  GNU C Library: Shared libraries an
ii  libcomerr2 1.37-2sarge1  common error description library
ii  libkrb53   1.3.6-2sarge2 MIT Kerberos runtime libraries
ii  libpam-runtime 0.76-22   Runtime support for the PAM librar
ii  libpam0g   0.76-22   Pluggable Authentication Modules l
ii  libssl0.9.70.9.7e-3  SSL shared libraries
ii  libwrap0   7.6.dbs-8 Wietse Venema's TCP wrappers libra
ii  zlib1g 1:1.2.2-4.sarge.2 compression library - runtime

-- debconf information:
  ssh/privsep_tell:
  ssh/insecure_rshd:
  ssh/privsep_ask: true
  ssh/ssh2_keys_merged:
  ssh/user_environment_tell:
* ssh/forward_warning:
  ssh/insecure_telnetd:
  ssh/new_config: true
* ssh/use_old_init_script: true
* ssh/protocol2_only: true
  ssh/encrypted_host_key_but_no_keygen:
* ssh/run_sshd: true
* ssh/SUID_client: true

The problem occurs when I run ssh on a client with this package installed,
trying to connect to two servers with this package installed.  When I
give the command 'ssh hostname', with or without various combinations
of arguments, I get the response

 Disconnecting: Protocol error: didn't expect packet type 34

I enclose (in uuencoded gzipped tar format) the various files
from /etc/pam.d/, /etc/ssh/sshd_config, /var/log/auth.log, and
the result of trying ssh with the verbose option.

 -- Owen
 [EMAIL PROTECTED]

begin 600 problem.tgz
M'XL(`R!$,`^U;;7/;-A+VU_!78.*[B=VS9)(B)44S[IQB.XG'KVYT]YT
M.BI$0A).%*`2HWUP_WVVP5(6K)E)^G4BGLE.JDE8K%88-\+B6IC+=-[F
M0FNZKOGK/OSKEYKPW,;+OYK!Z_ENZX0=V,-+5.:[EMAIL PROTECTED]
M7^2]CBU)[EMAIL PROTECTED])3QV#KB*I!`LTER,.N0BE5I,B$,3:5#8AZ+-YJP
MVQE0D!F-)DP3/[EMAIL PROTECTED]C:K]N1K3T[OR_%8:/^C]^+OS?]SSP?R\,@@T2
M5OZ_%OW/Z+0[[X4_3Q_H8_RO]KU/_D9Q.I:C1*)*9T']X_@'?DS_S0#S
MO]*`T`[EMAIL PROTECTED];I;)+=QXR`U`C-]%BF_#JN11$,[EMAIL PROTECTED]
M-$G@7K-(Z8Y'8UYHH,((_.4B2K*8Q628RBF1[EMAIL PROTECTED](8_(1?4
M(HA'YEQ:@X4!$3-999$F.7IEP02A*N-)%#`FSN3:508CH8=J$K,A%PR8
M(%W$A$YI0F!)3DRDPF/YF0H4Y(I1G`-0*3F2K-IG8#P#(?3+-$HOI;`18ID
[EMAIL PROTECTED])`EPV#4T5NQA*8Y+NE$T9XB*PH)!8+.O:DQC5.'KG)7J7LUPQ)
M7L6]S/!;^M*%IU$94/[EMAIL PROTECTED]$^RI(,0N]?H_[OSX'_'_=_/NY_[@\S?A
MN1TX%'E_]_._\$(N'2^31B_3^!F^P/WO+24:LRE;'[EMAIL PROTECTED]:KC^H[BPZ\
M0TX.NA[Y)[EMAIL PROTECTED])4AIS'%D.`3/H#N5DTIH*KJ3(!
M`CJ7HT/N_BCG#4UC.DC8JH92Z=FRCRH$_.F*!#U50_!)-HT4KRZBS2+
[EMAIL PROTECTED](+$GD!.BC+75ZO/Y;OT95IIO'[EMAIL PROTECTED][EMAIL 
PROTECTED]S2K^
[EMAIL PROTECTED](#B8RUE=40RXM8^VV3P(J(3VP,[EMAIL PROTECTED]@9`^V(=Q6
MKDD]#-]%*'3,,AAY;/A:R)G)F+#6N6-RN'?'5LJ)O.]+QD#?DA49@EA];
MC*A39K:2*I+(:(*?@A9-_NWU8UC\LLT#M\0.M0@,[,KI@(.C4`%,(Z9`-R
MA#,[EMAIL PROTECTED];R4.V6SA)[EMAIL PROTECTED])6_K+^;O_J?+P_[^Q\/]XU[_\*S[
M[DU!S07P22(BSKL#6Q3-X'[EMAIL PROTECTED];53SDIO_8*Q($%9F\1Q(F1H`?
M;*H1H+=E#+6':T+D+NY:`[6Z2QVF6\Q3)[EMAIL PROTECTED];0(;A^KK)K!U
M`C::*-AP(Q)D_6@$,8D_E(DB8ULY:DP7)A:)Y[6XE?``3UZ*41A/X;$J
M=,2L@%600!)[EMAIL PROTECTED][EMAIL PROTECTED][EMAIL PROTECTED];;B6%H
M)@I:I!/L%C[2#Q`#F:0($K.!H)V;I5.A*9Z07_8ON_O')[EMAIL PROTECTED]'^U7
MW:N/;ZR)E*46($8RR_6B!N,IW.]QJXLZ#0O2:)^5!.]AI/#]T`X+V$6-H
M4%N)Z.3*MV^_/R?`\6UUG]:7I'_?5O_X-F6.7_;Y?_R.`])]_^A-D?TW5
M),_Z!$Y$$.G#`,KM1$5U:P-5P;[EMAIL PROTECTED]^,H6?OZ-B_AV!S!3K0$(6)#[J1
MYF5\%K`)T^W'X.F,-SYJMK/7NVMP)1\/%W+R[EMAIL PROTECTED]SV1CGZO_
M^'6_[W0;_E^T\/Z;Z/[EMAIL PROTECTED]:U*(#AE^F9@#IC=F=BR.P.N#*
MP[EMAIL PROTECTED]/;L%C`;[EMAIL PROTECTED])MA4N8+VC.2T:-3_9!1=])JG
[EMAIL PROTECTED]_V6_TI1H4F.LY6G0?:.JXKJG1RI`+)OD)^]GQ_EG
M'J[(0AULQ5,+UA]VY.Z)R[A(0[EIO`0X6)N8KIG0S+$%EIB(]S)(:3NE
M[T,KW;\0=IUO[EMAIL PROTECTED]@P3I3Q01X-'FC``KS9!O'YOKR:[EMAIL 
PROTECTED],`8)
M=MT-W./:6!KCU()GW*]J)I2![8G5\'=`]4D!.B^N]O:`$T*^CXG/@/(O^S
MO@/P5?[EMAIL PROTECTED];1I8=_YO!(W`Z-]M-D+/X/\@;`55_E]3
M_L_+2,F`-PBQK^'!@1FZ!OBSMH*%OM;@O8H;#$S$#/!YHC`W_((?93
MK7;(T84R@'N6OT$`($9,\,QG`N@(SX/HSZ9],\8FKR=I+$`HG?)(`ZS@
M40[)AUCRV+UCB-+8BLL`P3OUYZ8;IQG.)];Z=S_XE;-_\YY7MM_H[G?)1*
M'[-YGL*L/_3'\+`_87,0,.]7MG!4C+QFJEJ_A/C4T4-C\IXIQB$S+Z-6SV
M)'7C.;;CU=*62H8GEF+:)*):!.1^.,?8\T[*Z`0+0V*D'-C)DLT%VP
MU0D?,LVGS!ZN^\E+`97H7A'5FQ',^`/4CN*!7(?,ERVX#.(]3-1_=5VG
[EMAIL PROTECTED]:S;2:1(T`8(ZW5X`UWM.()P`'2/?3U4'^D[8-4O(T=G[U.C
M6[H/[EMAIL PROTECTED],6N4,XF3')A;KNP?U,)VA;P[%0WV#GK24QD#1)S#=2Y
M['67^9K'%]D`UK.B8[.;OTK`8E3Q]B[5W\?[]912;3L0A49S^0^/ICBC!U
M`6[]=[HC:MQ,W9;^9\ZQS-!(R99?VD9F3O#@VUX8PC(F9%[4#BG66DT!
M$E1KN;0(PFHF0-\*8CG(LRX+%EA$50[EMAIL PROTECTED]@H6KQK[J2Q'\J$1
M+3;+UBG$2[,\V)P%0PCPCC;[EMAIL PROTECTED][EMAIL PROTECTED]