[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#231485: Dies with hash mismatch error before login



Colin Watson wrote:

severity 231485 important
tags 231485 - sid
thanks

On Fri, Feb 06, 2004 at 09:38:43PM +0000, Steven Fuerst wrote:

>Package: ssh
>Version: 1:3.6.1p2-11
>Severity: grave
>Tags: sid
>
>ssh cannot be used to log into other machines or forward ports.


This is definitely not true across the board (I use it all the time, for
example), so I'm downgrading this bug.

The weird thing is that I don't think this is directly due to the ssh pacakge. I think I was using it for a few weeks before this happened, but I'm not absolutely sure. Anyway, I upgraded a large number of packages recently, and then ssh didn't work. It is probably one of glibc, libz or pam which is the root cause of this bug... but I can't work out which one of those it is. No other program shows a problem, which is why I originally sent the bug report here. :-/

>I have tried to connect to several machines running Tru64 Unix and
>linux, all failing with the following error message before the login
>prompt is reached:
>
>hash mismatch
>key_verify failed for server_host_key


This is going to be difficult to debug. Is there any way you can set up
an environment that I can attempt to connect to and check? The host key
check happens before authentication, so I wouldn't need an account.

Unfortunately not. The machine with the problem lies beyond a firewall which isn't in my control. All incoming ports are filtered so it isn't reachable from the outside. :-/

However, I have a non-debian linux machine inside the firewall... and sshing from there to the broken box yields:

hash mismatch
key_verify failed for server_host_key

It isn't the network itself which is the problem, since I can ssh from the non-debian machine to the Alphas running Tru64 without any problem.

Also, what architecture are you using?

i386, handrolled kernel 2.6.1

I've be fiddling with the source to see if I can find out what is going on, but no luck so far. If you want me to apply any debug patches etc, I'll be glad to help.

Steven





Reply to: