Bug#596087: 'Bad packet length' error when using ControlPersist in a 'ssh -W' ProxyCommand
Package: ssh
Version: 1:5.6p1-1
Severity: normal
Tags: experimental
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello, I have the following ~/.ssh/config:
Host *
ControlMaster autoask
ControlPath /home/jrollins/.ssh/controls/%r@%h:%p
ControlPersist 10
When I try to connect to a hidden host using ssh -W as a proxy
command, I get the following error:
0 servo:~ $ ssh -oProxyCommand='ssh -W %h:%p host0' host1
Bad packet length 1397966893.
Disconnecting: Packet corrupt
255 servo:~ $
It seems to work fine if establish a persistent control master
connection to the pass-through host first:
0 servo:~ $ ssh host0 exit
0 servo:~ $ ssh -oProxyCommand='ssh -W %h:%p host0' host1
host1:~ 0$
If I then comment out the ControlPersist line in the config file,
therefore not using ControlPersist at all for any of the connections,
the connection succeeds with no problem:
0 servo:~ $ ssh -oProxyCommand='ssh -W %h:%p host0' host1
host1:~ 0$
It also succeeeds if I keep ControlPersist commented out in the
config, and just specify ControlPersist for the outer connection:
0 servo:~ $ ssh -oProxyCommand='ssh -W %h:%p host0' -oControlPersist=10 host1
host1:~ 0$
Clearly there's some sort of bad interaction with ControlPersist and
the -W pass-through option. I notice when I try the pass-through
command on its own, there seems to be a "double hit", which I imagine
is related to the problem:
0 servo:~ $ ssh -W chez:22 -oControlPersist=5 host0
SSH-2.0-OpenSSH_5.1p1 Debian-5
SSH-2.0-OpenSSH_5.1p1 Debian-5
0 servo:~ $
I hope this can be resolved, since I would like to be able to use
ControlPersist when using pass through hosts, without having to
establish a connection to the pass through host ahead of time. It's
particularly useful in this context, actually.
Thanks so much for maintaining!
jamie.
- -- System Information: Debian Release: squeeze/sid APT prefers testing
APT policy: (500, 'testing'), (200, 'unstable') Architecture: i386
(i686)
Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages ssh depends on:
ii openssh-client 1:5.6p1-1 secure shell (SSH) client, for sec
ii openssh-server 1:5.6p1-1 secure shell (SSH) server, for sec
ssh recommends no packages.
ssh suggests no packages.
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=+LN1
-----END PGP SIGNATURE-----
Reply to: