Re: Different OpenSSH versions

[Laverne Schrock <lists-laverne@schrock.email>]

On Fri, 2016-06-10 at 22:50 -0500, Laverne Schrock wrote:
> Hi all,
> 
> I have a client running an older version of ssh 
> '$ssh -V
> OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013'
> and a server running a current version of ssh
> 'OpenSSH_7.2p2 Debian-5, OpenSSL 1.0.2h  3 May 2016'
> 
> I can access other servers running 6.9, but not any running 7.2. The
> error. Here is the (sanitized) output of a connection attempt.
> '$ ssh -vvv user@remotehost
> OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 19: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to remotehost [ip.ip.ip.ip] port 22.
> debug1: Connection established.
> debug3: Incorrect RSA1 identifier
> debug3: Could not load "/home/user/.ssh/id_rsa" as a RSA1 public key
> debug1: identity file /home/user/.ssh/id_rsa type 1
> debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
> debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
> debug1: identity file /home/user/.ssh/id_rsa-cert type -1
> debug1: identity file /home/user/.ssh/id_dsa type -1
> debug1: identity file /home/user/.ssh/id_dsa-cert type -1
> debug1: identity file /home/user/.ssh/id_ecdsa type -1
> debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1
> ssh_exchange_identification: Connection closed by remote host'
> 
> Is there a setting on the OpenSSH 7 server to allow the older client
> to
> connect? Note that the older server accepts my new client just fine.
> I
> can connect to the newer server from additional, up to date clients.
> 
> Thanks,
> lverns
Never mind me! I had forgotten that this particular server was behind a
proxy and needed a ProxyCommand set in '.ssh/config'

Sorry for the noise,
lverns