Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

odd problem with connecting from a specific network

Subject: odd problem with connecting from a specific network
Date: Tue, 14 Aug 2007 15:45:03 +0100
Hi,

I have an odd problem with ssh connections only (it seems), from a specific network, ie this doesn't happen when on the same LAN as the ssh server. (and not all non-local networks, over the internet is fine)

If I try an connect to the server;
[root@servername log]# ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
[root@servername log]# rpm -qa| grep openssh
openssh-clients-3.9p1-8.RHEL4.15
openssh-server-3.9p1-8.RHEL4.15
openssh-3.9p1-8.RHEL4.15

from any client, example cygwin;
$ ssh -V
OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007

$ ssh username@servername
#it just hangs here for the client, and this can be replicated using secureCRT client as well


The connection hangs at the following point, which corresponds to these lines in the debug log;
Aug 14 14:36:01 servername sshd[495]: debug2: kex_derive_keys
Aug 14 14:36:01 servername sshd[495]: debug2: set_newkeys: mode 1
Aug 14 14:36:01 servername sshd[495]: debug1: SSH2_MSG_NEWKEYS sent
Aug 14 14:36:01 servername sshd[495]: debug1: expecting SSH2_MSG_NEWKEYS
Aug 14 14:36:01 servername sshd[495]: debug2: set_newkeys: mode 0
Aug 14 14:36:01 servername sshd[495]: debug1: SSH2_MSG_NEWKEYS received
Aug 14 14:36:01 servername sshd[495]: debug1: KEX done
Aug 14 14:36:01 servername sshd[495]: debug1: userauth-request for user username service ssh-connection method none
Aug 14 14:36:01 servername sshd[495]: debug1: attempt 0 failures 0
Aug 14 14:36:01 servername sshd[495]: debug2: input_userauth_request: setting up authctxt for username
Aug 14 15:36:01 servername sshd[494]: debug2: monitor_read: 7 used once, disabling now
Aug 14 14:36:01 servername sshd[495]: debug2: input_userauth_request: try method none
Aug 14 15:36:01 servername sshd[494]: debug1: PAM: initializing for "username"


So I guess pam is trying to do something, which due to the network settings of my client pc, is failing. Any idea what that could be?

Thanks,

Tom





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


<Prev in Thread] Current Thread [Next in Thread>