Re: Debian Bug#495917 - Netscreen / Extreme login bug
On Tue, Feb 24, 2009 at 04:22:24PM +0000, Andy Davidson wrote:
> On 24 Feb 2009, at 16:07, Colin Watson wrote:
>> The fix for this wasn't uploaded to Debian until after the release of
>> Ubuntu 8.10, which you seem to be using. I've built a backport of the
>> current version for you; does this help?
>>
>> https://launchpad.net/~cjwatson/+archive/ppa
>
> Hi, Colin
>
> Thank you for replying and working on this. No, I get the same problem
> with the new version
>
> debug1: Authentication succeeded (keyboard-interactive).
> debug1: channel 0: new [client-session]
> debug1: Entering interactive session.
> channel 0: open failed: resource shortage: Channel open failed
> debug1: channel 0: free: client-session, nchannels 1
Could you send me the full ssh -vvv log, please, just to make sure this
is the same thing?
Are any server logs available?
> rancid:~$ ls -la `which ssh`
> -rwxr-xr-x 1 root root 333256 2009-02-24 14:32 /usr/bin/ssh
> rancid:~$ ssh -V
> OpenSSH_5.1p1 Debian-5ubuntu1~intrepid1, OpenSSL 0.9.8g 19 Oct 2007
>
> Remote banner from the switch is "SSH-2.0-4.1.2 SSH Secure Shell
> Toolkit". I am not sure how the protocol negotiation happens, but I
> would have thought Dave Holland's patch file would have matched and
> fixed it :
>
> --- openssh-5.1p1.orig/compat.c
> +++ openssh-5.1p1/compat.c
> @@ -160,6 +160,8 @@
> SSH_BUG_SCANNER },
> { "Probe-*",
> SSH_BUG_PROBE },
> + { "NetScreen,"
> + "*4.1.2*", SSH_BUG_WINDOWSIZE },
> { NULL, 0 }
> };
>
Later comments in the same bug (e.g. that from Florian Lohoff) indicated
that the upstream fix was sufficient, so I backported that in preference
to a home-grown patch, which I usually find to be a sound policy. I may
be able to see from your logs whether there's any relevant difference
between your setup and that of other people.
Cheers,
--
Colin Watson [cjwatson@debian.org]
Reply to: