Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #168817 > unrolled thread

Different OpenSSH versions

Started byLaverne Schrock <lists-laverne@schrock.email>
First post2016-06-11 06:10 +0200
Last post2016-06-12 00:00 +0200
Articles 2 — 1 participant

Back to article view | Back to linux.debian.user


Contents

  Different OpenSSH versions Laverne Schrock <lists-laverne@schrock.email> - 2016-06-11 06:10 +0200
    Re: Different OpenSSH versions Laverne Schrock <lists-laverne@schrock.email> - 2016-06-12 00:00 +0200

#168817 — Different OpenSSH versions

FromLaverne Schrock <lists-laverne@schrock.email>
Date2016-06-11 06:10 +0200
SubjectDifferent OpenSSH versions
Message-ID<rIIpb-6Cf-7@gated-at.bofh.it>
Hi all,

I have a client running an older version of ssh 
'$ssh -V
OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013'
and a server running a current version of ssh
'OpenSSH_7.2p2 Debian-5, OpenSSL 1.0.2h  3 May 2016'

I can access other servers running 6.9, but not any running 7.2. The
error. Here is the (sanitized) output of a connection attempt.
'$ ssh -vvv user@remotehost
OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to remotehost [ip.ip.ip.ip] port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/user/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /home/user/.ssh/id_rsa type 1
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
debug1: identity file /home/user/.ssh/id_rsa-cert type -1
debug1: identity file /home/user/.ssh/id_dsa type -1
debug1: identity file /home/user/.ssh/id_dsa-cert type -1
debug1: identity file /home/user/.ssh/id_ecdsa type -1
debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1
ssh_exchange_identification: Connection closed by remote host'

Is there a setting on the OpenSSH 7 server to allow the older client to
connect? Note that the older server accepts my new client just fine. I
can connect to the newer server from additional, up to date clients.

Thanks,
lverns

[toc] | [next] | [standalone]


#168844

FromLaverne Schrock <lists-laverne@schrock.email>
Date2016-06-12 00:00 +0200
Message-ID<rIZ6F-8oR-3@gated-at.bofh.it>
In reply to#168817
On Fri, 2016-06-10 at 22:50 -0500, Laverne Schrock wrote:
> Hi all,
> 
> I have a client running an older version of ssh 
> '$ssh -V
> OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013'
> and a server running a current version of ssh
> 'OpenSSH_7.2p2 Debian-5, OpenSSL 1.0.2h  3 May 2016'
> 
> I can access other servers running 6.9, but not any running 7.2. The
> error. Here is the (sanitized) output of a connection attempt.
> '$ ssh -vvv user@remotehost
> OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 19: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to remotehost [ip.ip.ip.ip] port 22.
> debug1: Connection established.
> debug3: Incorrect RSA1 identifier
> debug3: Could not load "/home/user/.ssh/id_rsa" as a RSA1 public key
> debug1: identity file /home/user/.ssh/id_rsa type 1
> debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
> debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
> debug1: identity file /home/user/.ssh/id_rsa-cert type -1
> debug1: identity file /home/user/.ssh/id_dsa type -1
> debug1: identity file /home/user/.ssh/id_dsa-cert type -1
> debug1: identity file /home/user/.ssh/id_ecdsa type -1
> debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1
> ssh_exchange_identification: Connection closed by remote host'
> 
> Is there a setting on the OpenSSH 7 server to allow the older client
> to
> connect? Note that the older server accepts my new client just fine.
> I
> can connect to the newer server from additional, up to date clients.
> 
> Thanks,
> lverns
Never mind me! I had forgotten that this particular server was behind a
proxy and needed a ProxyCommand set in '.ssh/config'

Sorry for the noise,
lverns

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web