[Bug 874518] Re: ssh fails after upgrade to 11.10

[Jason Nett]

Upon a fresh install of Ubuntu 11.10, I still have problems with ssh.  After
studying it all day, I believe that the problem has something to do with ssh
not being able to communicate a valid kerberos ticket via "gssapi-with-mic".

The problem area of the verbose output looks like:
----------------------------------------
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
KDC can't fulfill requested option

debug1: Unspecified GSS failure.  Minor code may provide more information
KDC can't fulfill requested option

debug1: Unspecified GSS failure.  Minor code may provide more
information


debug2: we sent a gssapi-with-mic packet, wait for reply
-------------------------------------------

where it should look like (according to the successful execution on my
laptop that is still running 11.04):

--------------------------------------------
debug1: Next authentication method: gssapi-with-mic
debug2: we sent a gssapi-with-mic packet, wait for reply
debug1: Authentication succeeded (gssapi-with-mic).
Authenticated to <name>.<org>.gov ([1xx.xxx.xxx.xxx]:xx).
----------------------------------------------

If I look at the version numbers of the ssh packages installed with "dpkg -l
| grep ssh", Ubuntu 11.10 has:

ii  openssh-client
1:5.8p1-7ubuntu1                        secure shell (SSH) client, for
secure access to remote machines
ii  ssh-askpass-gnome
1:5.8p1-7ubuntu1                        interactive X program to prompt
users for a passphrase for ssh-add

while 11.04 has

ii  openssh-client                         1:5.8p1-1ubuntu3
                       secure shell (SSH) client, for secure access to
remote machines
ii  ssh-askpass-gnome                      1:5.8p1-1ubuntu3
                       interactive X program to prompt users for a
passphrase for ssh-add


I've searched through every configuration file I can find, especially those
in ./ssh/ and /etc/ssh/, but have not been able to solve the problem or
produce any different results.  The best I can think of is that there's
something about the newer versions that gssapi-with-mic is not agreeing well
with.

I would greatly appreciate if this bug could be fixed because it affects my
ability to work remotely from home.

J


On Sat, Oct 15, 2011 at 11:48 AM, Jason Nett <jasonnett80 at gmail.com> wrote:

> Sorry, you're absolutely right: I did a rush job and forgot to edit it.  I
> also didn't realize that it was posted to a webpage.  Is it possible for you
> to delete the post at:
>
> https://bugs.launchpad.net/**ubuntu/+source/openssh/+bug/**874518<https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/874518>
>
> ?
>
> I'm going to attempt a fresh install of 11.10 rather than this upgrade
> version.  I've run into other problems with my latex editor TexMaker as well
> as acroread.
>
>
> Jason
>
>
>
> On 10/15/2011 01:15 AM, Clint Byrum wrote:
>
>> Excerpts from Jason Nett's message of Sat Oct 15 00:54:27 UTC 2011:
>>
>>> Hi Clint,
>>>
>>> Thanks for getting back to me.  Using ifconfig, my laptop's "inet addr"
>>> is "127.0.0.1" and "ssh -vv 127.0.0.1" yields:
>>>
>>> jason:~$ ssh -vv 127.0.0.1
>>> OpenSSH_5.8p1 Debian-1ubuntu3, OpenSSL 0.9.8o 01 Jun 2010
>>> debug1: Reading configuration data /etc/ssh/ssh_config
>>> debug1: Applying options for *
>>> debug2: ssh_connect: needpriv 0
>>> debug1: Connecting to 127.0.0.1 [127.0.0.1] port 22.
>>> debug1: connect to address 127.0.0.1 port 22: Connection refused
>>> ssh: connect to host 127.0.0.1 port 22: Connection refused
>>>
>>> Despite the "connection refused" I see here, it does connect to where it
>>> needs to, as it always has.
>>>
>>> Meanwhile, my desktop's "inet addr" is 192.168.1.64 and the output here
>>> is:
>>>
>>> jason:~$ ssh -vv 192.168.1.64
>>> OpenSSH_5.8p1 Debian-7ubuntu1, OpenSSL 1.0.0e 6 Sep 2011
>>> debug2: ssh_connect: needpriv 0
>>> debug1: Connecting to 192.168.1.64 [192.168.1.64] port 22.
>>> debug1: Connection established.
>>> debug1: identity file /home/jason/.ssh/id_rsa type -1
>>> debug1: identity file /home/jason/.ssh/id_rsa-cert type -1
>>> debug1: identity file /home/jason/.ssh/id_dsa type -1
>>> debug1: identity file /home/jason/.ssh/id_dsa-cert type -1
>>> debug1: identity file /home/jason/.ssh/id_ecdsa type -1
>>> debug1: identity file /home/jason/.ssh/id_ecdsa-cert type -1
>>> debug1: Remote protocol version 2.0, remote software version
>>> OpenSSH_5.8p1 Debian-7ubuntu1
>>> debug1: match: OpenSSH_5.8p1 Debian-7ubuntu1 pat OpenSSH*
>>> debug1: Enabling compatibility mode for protocol 2.0
>>> debug1: Local version string SSH-2.0-OpenSSH_5.8p1 Debian-7ubuntu1
>>> debug2: fd 3 setting O_NONBLOCK
>>> debug1: SSH2_MSG_KEXINIT sent
>>> Read from socket failed: Connection reset by peer
>>>
>>> Again, when I attempt to ssh here I get:
>>>
>>> Permission denied (gssapi-keyex,gssapi-with-mic,**keyboard-interactive).
>>>
>>>  Jason, thanks for the quick response.
>>
>> The last line: Read from socket fialed; Connectino reset by peer
>>
>> means that sshd on your desktop did something to disconnect rather
>> unexpectedly.  It would help to see the contents of /var/log/auth.log
>> from your desktop, though please remove any sensitive information from
>> it before posting.
>>
>>
>

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/874518

Title:
  ssh fails after upgrade to 11.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/874518/+subscriptions