Hi,

I have an odd problem with ssh connections only (it seems), from a specific network, ie this doesn't happen when on the same LAN as the ssh server. (and not all non-local networks, over the internet is fine)

If I try an connect to the server;
[EMAIL PROTECTED] log]# ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
[EMAIL PROTECTED] log]# rpm -qa| grep openssh
openssh-clients-3.9p1-8.RHEL4.15
openssh-server-3.9p1-8.RHEL4.15
openssh-3.9p1-8.RHEL4.15

from any client, example cygwin;
$ ssh -V
OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007

$ ssh [EMAIL PROTECTED]
#it just hangs here for the client, and this can be replicated using secureCRT client as well

The connection hangs at the following point, which corresponds to these lines in the debug log;
Aug 14 14:36:01 servername sshd[495]: debug2: kex_derive_keys
Aug 14 14:36:01 servername sshd[495]: debug2: set_newkeys: mode 1
Aug 14 14:36:01 servername sshd[495]: debug1: SSH2_MSG_NEWKEYS sent
Aug 14 14:36:01 servername sshd[495]: debug1: expecting SSH2_MSG_NEWKEYS
Aug 14 14:36:01 servername sshd[495]: debug2: set_newkeys: mode 0
Aug 14 14:36:01 servername sshd[495]: debug1: SSH2_MSG_NEWKEYS received
Aug 14 14:36:01 servername sshd[495]: debug1: KEX done
Aug 14 14:36:01 servername sshd[495]: debug1: userauth-request for user username service ssh-connection method none
Aug 14 14:36:01 servername sshd[495]: debug1: attempt 0 failures 0
Aug 14 14:36:01 servername sshd[495]: debug2: input_userauth_request: setting up authctxt for username Aug 14 15:36:01 servername sshd[494]: debug2: monitor_read: 7 used once, disabling now Aug 14 14:36:01 servername sshd[495]: debug2: input_userauth_request: try method none
Aug 14 15:36:01 servername sshd[494]: debug1: PAM: initializing for "username"

So I guess pam is trying to do something, which due to the network settings of my client pc, is failing. Any idea what that could be?

Thanks,

Tom





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Reply via email to