[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#292880: marked as done (sshd is unable to do X-forwarding with Kernel 2.6)



Your message dated Thu, 26 May 2005 13:49:54 +0100
with message-id <20050526124954.GE18019@riva.ucam.org>
and subject line Bug#292880: Problem found
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 30 Jan 2005 20:37:19 +0000
>From kaymes@cip.physik.uni-freiburg.de Sun Jan 30 12:37:19 2005
Return-path: <kaymes@cip.physik.uni-freiburg.de>
Received: from lists.physik.uni-freiburg.de (cipsc.physik.uni-freiburg.de) [132.230.75.102] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CvLot-0000c0-00; Sun, 30 Jan 2005 12:37:19 -0800
Received: from (islay.physik.uni-freiburg.de) [132.230.75.72] (mail)
	by cipsc.physik.uni-freiburg.de with esmtp (Exim 3.36 #1 (Debian))
	id 1CvLoq-00063P-00; Sun, 30 Jan 2005 21:37:16 +0100
Received: from kaymes by islay.physik.uni-freiburg.de with local (Exim 3.36 #1 (Debian))
	id 1CvLoq-0005Lp-00; Sun, 30 Jan 2005 21:37:16 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Konstantin Seiler <list@kseiler.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: sshd is unable to do X-forwarding with Kernel 2.6
X-Mailer: reportbug 3.2
Date: Sun, 30 Jan 2005 21:37:16 +0100
Message-Id: <E1CvLoq-0005Lp-00@islay.physik.uni-freiburg.de>
Sender: Konstantin Seiler <kaymes@cip.physik.uni-freiburg.de>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: ssh
Version: 1:3.8.1p1-8.sarge.4
Severity: important


When upgrading from a 2.4-Kernel to 2.6, sshd is unable to handle
X-forwarding. 

Debug-Output of sshd follows:

Restarting OpenBSD Secure Shell server: sshddebug1: sshd version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: private host key: #0 type 0 RSA1
debug1: read PEM private key done: type RSA
debug1: private host key: #1 type 1 RSA
debug1: read PEM private key done: type DSA
debug1: private host key: #2 type 2 DSA
socket: Address family not supported by protocol
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Server will not fork when running in debugging mode.
Connection from 132.230.75.74 port 55348
debug1: Client protocol version 2.0; client software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user kaymes service ssh-connection method none
debug1: attempt 0 failures 0
debug1: PAM: initializing for "kaymes"
debug1: PAM: setting PAM_RHOST to "lanai.physik.uni-freiburg.de"
debug1: PAM: setting PAM_TTY to "ssh"
Failed none for kaymes from 132.230.75.74 port 55348 ssh2
debug1: userauth-request for user kaymes service ssh-connection method publickey
debug1: attempt 1 failures 1
debug1: test whether pkalg/pkblob are acceptable
debug1: temporarily_use_uid: 1014/1014 (e=0/0)
debug1: trying public key file /home/kaymes/.ssh/authorized_keys
debug1: matching key found: file /home/kaymes/.ssh/authorized_keys, line 1
Found matching RSA key: bf:41:0b:52:e0:72:ec:f7:62:e2:c1:e1:2d:04:b1:87
debug1: restore_uid: 0/0
Postponed publickey for kaymes from 132.230.75.74 port 55348 ssh2
debug1: userauth-request for user kaymes service ssh-connection method publickey
debug1: attempt 2 failures 1
debug1: temporarily_use_uid: 1014/1014 (e=0/0)
debug1: trying public key file /home/kaymes/.ssh/authorized_keys
debug1: matching key found: file /home/kaymes/.ssh/authorized_keys, line 1
Found matching RSA key: bf:41:0b:52:e0:72:ec:f7:62:e2:c1:e1:2d:04:b1:87
debug1: restore_uid: 0/0
debug1: ssh_rsa_verify: signature correct
Accepted publickey for kaymes from 132.230.75.74 port 55348 ssh2
debug1: Entering interactive session for SSH2.
debug1: server_init_dispatch_20
debug1: server_input_channel_open: ctype session rchan 0 win 65536 max 16384
debug1: input_session_request
debug1: channel 0: new [server-session]
debug1: session_new: init
debug1: session_new: session 0
debug1: session_open: channel 0
debug1: session_open: session 0: link with channel 0
debug1: server_input_channel_open: confirm session
debug1: server_input_channel_req: channel 0 request pty-req reply 0
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req pty-req
debug1: Allocating pty.
debug1: session_pty_req: session 0 alloc /dev/pts/0
debug1: server_input_channel_req: channel 0 request x11-req reply 0
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req x11-req
debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported

[ MANY MANY identical lines skipped ]

debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported
debug1: x11_create_display_inet: Socket family 10 not supported
Failed to allocate internet-domain X11 display socket.
debug1: x11_create_display_inet failed.
debug1: server_input_channel_req: channel 0 request auth-agent-req@openssh.com reply 0
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req auth-agent-req@openssh.com
debug1: temporarily_use_uid: 1014/1014 (e=0/0)
debug1: restore_uid: 0/0
debug1: channel 1: new [auth socket]
debug1: server_input_channel_req: channel 0 request shell reply 0
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req shell
debug1: PAM: setting PAM_TTY to "/dev/pts/0"
debug1: PAM: establishing credentials
debug1: Setting controlling tty using TIOCSCTTY.
debug1: server_input_channel_req: channel 0 request window-change reply 0
debug1: session_by_channel: session 0 channel 0
debug1: session_input_channel_req: session 0 req window-change

Now the Session was established.


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-client
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15)

Versions of packages ssh depends on:
ii  adduser                     3.59         Add and remove users and groups
ii  debconf                     1.4.30.11    Debian configuration management sy
ii  dpkg                        1.10.26      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam-runtime              0.76-22      Runtime support for the PAM librar
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libssl0.9.7                 0.9.7e-2     SSL shared libraries
ii  libwrap0                    7.6.dbs-6    Wietse Venema's TCP wrappers libra
ii  zlib1g                      1:1.2.2-3    compression library - runtime

-- debconf information excluded

---------------------------------------
Received: (at 292880-done) by bugs.debian.org; 26 May 2005 12:49:58 +0000
>From cjwatson@flatline.org.uk Thu May 26 05:49:58 2005
Return-path: <cjwatson@flatline.org.uk>
Received: from chiark.greenend.org.uk [193.201.200.170] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DbHoD-0005kt-00; Thu, 26 May 2005 05:49:58 -0700
Received: from [192.168.124.112] (helo=riva.lab.dotat.at)
	by chiark.greenend.org.uk (Debian Exim 3.35 #1) with esmtp
	(return-path cjwatson@flatline.org.uk)
	id 1DbHoB-0001iP-00
	for 292880-done@bugs.debian.org; Thu, 26 May 2005 13:49:55 +0100
Received: from cjwatson by riva.lab.dotat.at with local (Exim 3.36 #1 (Debian))
	for 292880-done@bugs.debian.org
	id 1DbHoA-0004Uf-00; Thu, 26 May 2005 13:49:54 +0100
Date: Thu, 26 May 2005 13:49:54 +0100
From: Colin Watson <cjwatson@debian.org>
To: 292880-done@bugs.debian.org
Subject: Re: Bug#292880: Problem found
Message-ID: <20050526124954.GE18019@riva.ucam.org>
References: <200502192038.38844.list@kseiler.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200502192038.38844.list@kseiler.de>
User-Agent: Mutt/1.5.9i
Delivered-To: 292880-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

On Sat, Feb 19, 2005 at 08:38:38PM +0100, Konstantin Seiler wrote:
> We found the Problem: The loopback-device didn't fire up properly, that made 
> ssh fail. Maybe a proper error message would be nice...
> 
> You can close this bug.

OK, belatedly closed, thanks.

-- 
Colin Watson                                       [cjwatson@debian.org]



Reply to: