REPORT TO THE LIST.

A quick sumary of my problem:

I was trying to connect with SSH and VNC between two Linux PCs through the
Internet.  The SSH portion seemed to work fine.  I was using the port
forwarding feature as follow:

ssh -L 5910:remoteIP:5901 remoteIP

I was validated correctly by SSH.

On another command windows, I was trying to do this:

vncviewer localhost:10

Just to be kicked out.  On RemoteIP, I was getting the error message
"channel_open_failure:2 reason 1: bla bla"

I have been banging my head on the wall with this one and, although a lot of
help was provided through the list, I could find nothing wrong with the way I
was doing it.

THEN, A SOLUTION:

I noticed that RemoteIP /var/log/messages had entries stating that SSHD had a
"Bad protocol version identification 'quit '"

I read some more on this and found a SSHD option -V to disable the version
identification negotiation.  I could not find examples of this though so I did
not pursue it.

Instead, I changed the sshd_config file to force SSH version 1 on RemoteIP and
ssh_config to use only SSH version 1 on my localIP.  Both files were configured
to use version 2 and then version 1 (Protocol 2,1).

Using the "Protocol 1" entry fixed the problem and everyting worked like a charm
from this point on.  Although both setups of SSH seemed to be identical,
something was different enough to prevent a succesfull negotiation of the
protocol version identification when port forwarding was used.

I am now using SSH version 1, which is better than nothing.

I tried to force SSH version 2 but got a "secure connection to remoteIP
refused." 

I must have a problem on one end with the SSH version 2.  The server end
(remoteIP) was installed separately on Mandrake 6.2 while the workstation end
(localIP) came pre-installed with RedHat 7.0.  I must have missed a step
somewhere in installing SSH on Mandrake 6.2.

The rest of the problem rests with SSH.

Thanks for all the help provided by the vnc-list members.

Serge.
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to