[lug] OpenSSH upgrade small issue
Justin
glow at jackmoves.com
Wed Feb 21 18:20:12 MST 2001
I upgraded all my boxes today to OpenSSH 2.5.1p1 and I'm having a minor
problem. One machine for some reason will not connect to other machines
using protocol 2 unless I force it with the -2 flag. All of my machines
config files are the same and in /etc/ssh/ssh_config I have it try
protocol 2 first then 1. The only thing I've noticed is that the box
having the problem, does not appear to read the /etc/ssh/ssh_config
file before making a connection:
------------------
[glowecon at naz glowecon]$ ssh -v jackmoves.com
OpenSSH_2.5.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090600f
debug: Rhosts Authentication disabled, originating port will not be
trusted.
debug: ssh_connect: getuid 500 geteuid 500 anon 1
debug: Connecting to jackmoves.com [63.228.67.67] port 22.
debug: Connection established.
...
... snipped key file listings
...
debug: Remote protocol version 1.99, remote software version
OpenSSH_2.5.1p1
debug: match: OpenSSH_2.5.1p1 pat ^OpenSSH
debug: Local version string SSH-1.5-OpenSSH_2.5.1p1
----------------------------
You can see above that it just uses the ssh protocol 1 by default. My
other boxes appear to read the /etc/ssh/ssh_config file before making
their connection:
----------------------------
[glowecon at oldschool glowecon]$ ssh -v naz.jackmoves.com
OpenSSH_2.5.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090581f
debug: Reading configuration data /etc/ssh/ssh_config
debug: Applying options for *
debug: Rhosts Authentication disabled, originating port will not be
trusted.
debug: ssh_connect: getuid 500 geteuid 500 anon 1
debug: Connecting to naz [63.228.67.66] port 22.
debug: Connection established.
...
... snipped key file listings
...
debug: Remote protocol version 1.99, remote software version
OpenSSH_2.5.1p1
debug: match: OpenSSH_2.5.1p1 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug: Local version string SSH-2.0-OpenSSH_2.5.1p1
-------------------------
The boxes are almost identical in configuration. I haven't been able to
figure out why the 'naz' host won't automatically try protocol 2.
Anyone have any ideas? TIA.
Justin
-----
glow at jackmoves.com
www.jackmoves.com
More information about the LUG
mailing list