Login and ssh hang after password, before logging



Hello everyone,

I hope someone out there likes a challenge, or has seen the same thing
as I am getting here.

I have a nice new server, running RedHat Linux. It was up about a
month, acting as a web server with apache, an ssh server, and a samba
server. Today, I was able to log in through the console and ssh fine
until 2:30 in the afternoon.

The Problem:
I tried again to log in through ssh at 3:00, and got a login prompt,
where I put my username, and a password prompt where I put my password.
It then sat there. Weird enough, but it IS a network service, so I
tried from the console. Same response as ssh: no activity after the
password is entered.


Details:
At this time, all services were running normal, such as web, Samba, and
even logging. I was able to get into the server after a ctrl-alt-del
reboot, so it was still very responsive.

The weirdness is here: When I checked the secure log for ssh activity,
I saw NO RECORD of my attempted logins. I did see another user attempt
to log in through ssh, but was recorded as denied, since he wasn't in
the list of AllowedUsers. There was no sign of login activity on the
console in the messages log, and last didn't show that time.

Unfortunately, I was unable to get a copy of the logs from the server,
but I'll do so tomorrow, if needed.

I did come to my senses and turn on DEBUG2 logging for sshd (I'll get
them a few hours from now) and I am using ssh -vvv to see all that
happens after I enter my password and before it hangs. Here are the
results for password authentication and public-key authentication:

password:
debug1: Next authentication method: password
paul@site's password:
debug3: packet_send2: adding 48 (len 61 padlen 19 extra_pad 64)
debug2: we sent a password packet, wait for reply
*hangs*
I am able to ^C out of that hang

public-key:
Enter passphrase for key '/home/paul/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug3: ssh_session2_open: channel_new: 0
debug2: channel 0: send open
debug1: Entering interactive session.
*hangs*
I'm not able to ^C out of that - I just close the terminal window

I should note that this occurs on the following clients, all in
geographically different locations:
Windows (Putty)
Linux
Mac (terminal ssh)

>>From what I've seen, people who have similar type troubles are NOT
having the trouble from more than one client, but I'd be happy to see
otherwise.

Thanks for your time, sorry for the length. I hope to hear from you,
but if I solve this on my own, I'll post the solution.

Paul

.



Relevant Pages

  • SSH and LDAP
    ... We are installing an LDAP server for AIX and Solaris login ... "Too many authentication failures for " ... debug1: ssh_rsa_verify: signature correct ... debug3: preferred publickey,keyboard-interactive,password ...
    (comp.unix.aix)
  • LDAP and OpenSSH
    ... We are installing an LDAP server for AIX and Solaris login ... "Too many authentication failures for " ... debug1: ssh_rsa_verify: signature correct ... debug3: preferred publickey,keyboard-interactive,password ...
    (comp.security.ssh)
  • Re: Trouble with OpenSSH 3.4p1 - Cant connect with an RSA key pair
    ... >> I have a computer functioning as a server using RedHat 8.0 with OpenSSH ... I am experiencing a similar problem using passkey authentication with the ... < debug2: bits set: 1604/3191 ... < debug1: Server accepts key: pkalg ssh-rsa blen 149 ...
    (comp.security.ssh)
  • Re: How safe are FTP servers?
    ... decent server software with a good track record, ... that rsync can run transparently over a few protocols, including SSH ... Just to clarify, rsync uses it's own rsync protocol over SSH, stuffed ... server if you then use something like Basic HTTP authentication as well - ...
    (comp.os.linux.security)
  • Authentication (was Re: Great SWT Program)
    ... You know that ssh reads the ... authentication mechanisms are challenge/response-based and handle the ... what methods your server allows using 'ssh -v ... debug1: Authentications that can continue: publickey,password ...
    (comp.lang.java.programmer)