LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-09-2014, 08:37 AM   #1
gacanepa
Member
 
Registered: May 2012
Location: San Luis, Argentina
Distribution: Debian
Posts: 203

Rep: Reputation: 27
Issue with OpenSSH 5.5p1 in RHEL 5.7 server


Hi everyone,
We just bumped into the following issue at work.
All of a sudden we could not start new ssh sessions to a RHEL 5.7 server, but existing ones were kept alive.
In those circumstances, these existing connections appeared to be handled by init (as the ssh daemon seemed to be down - it was not showing anymore in the list of running processes, invoked wither with top or ps -ef) as shown in the PPID of the following process list:
Code:
me@rhel /home/me:ps -ef | grep ssh | grep -v grep
root 6238 1 0 06:28 ? 00:00:00 sshd: user1@pts/12
root 6847 1 0 08:03 ? 00:00:00 sshd: tn2204@pts/36,pts/37
root 6956 1 0 08:41 ? 00:00:00 sshd: user2@pts/38
root 9271 1 0 06:11 ? 00:00:00 sshd: user3@pts/31
root 9910 1 0 10:17 ? 00:00:00 sshd: user4@pts/25
root 14453 1 0 07:30 ? 00:00:00 sshd: user5@pts/33
root 19932 1 0 10:23 ? 00:00:00 sshd: user6@pts/23
root 20997 1 0 10:23 ? 00:00:00 sshd: user6@pts/29
root 22245 1 0 07:35 ? 00:00:00 sshd: user7@pts/34
root 22920 1 0 Jan07 ? 00:00:00 sshd: user8@pts/24
root 27904 1 0 02:59 ? 00:00:00 sshd: user9@pts/19
root 28148 1 0 Jan02 ? 00:00:00 sshd: user10@pts/27,pts/17
root 29046 1 0 06:23 ? 00:00:00 sshd: user11@pts/5
root 30131 1 0 09:32 ? 00:00:00 sshd: user12@pts/18,pts/39
me@rhel /home/me:
Any ideas why the same process opened 2 terminals for user10 and user12 but user6 had to start 2 processes in order to open 2 terminals?
The version of OpenSSH is OpenSSH_5.5p1.
Any hints or ideas of what could have caused this issue will be more than appreciated.
 
Old 01-09-2014, 03:53 PM   #2
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,822

Rep: Reputation: 610Reputation: 610Reputation: 610Reputation: 610Reputation: 610Reputation: 610
Looks like SSH multiplexing causes that output in ps.

Your problem with not being able to log in probably was because SSHd was not running, though. So look at the log files for any crash reports, and check that ssh cleanly restarts.
 
Old 01-09-2014, 04:07 PM   #3
gacanepa
Member
 
Registered: May 2012
Location: San Luis, Argentina
Distribution: Debian
Posts: 203

Original Poster
Rep: Reputation: 27
Quote:
Originally Posted by AlucardZero View Post
Looks like SSH multiplexing causes that output in ps.

Your problem with not being able to log in probably was because SSHd was not running, though. So look at the log files for any crash reports, and check that ssh cleanly restarts.
Thanks for your reply!
However, we looked in the logs and couldn't find anything in /var/log/secure nor in /var/log/audit/audit.log. Anywhere else we should look?
 
Old 01-09-2014, 04:29 PM   #4
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,688

Rep: Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259Reputation: 1259
Try /var/log/messages. Most service process aborts get recorded there. The others are for specific classes of messages rather than general messages.

Last edited by jpollard; 01-09-2014 at 04:37 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Upgraded SSH to 5.9p1 but the server responds with 5.5p1 still jerry98 Linux - Server 2 05-07-2012 11:45 PM
Chrooted OpenSSH SFTP server logging issue Sea-you Linux - Server 2 08-03-2011 09:09 PM
Issue w/ activating RHEL 5 Server on the Red Hat Network tightlikethat Linux - Enterprise 2 01-02-2010 08:58 AM
Software RAID issue with a RHEL 4 server Vanyel Linux - Server 9 09-07-2007 04:00 AM
Issue with sshd (openssh 3.5p1-6) eid Linux - Security 3 11-21-2005 07:10 AM


All times are GMT -5. The time now is 03:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration