Good day members,

I have configured Openssh on a Windows Server 2003 named bkp_swift1
This server bkp_swift1 is supposed to accept in coming connections from a cluster of AIX Servers for files transfer in both directions via scp and rcp. The cluster is made up of two nodes: SGBGEPROD1 and SGBGEPROD2.

I have succeeded to configure an ssh connection between:
node2(SGBGEPROD2) of the cluster and the Windows Server2003(bkp_swift1).
The file transfer with scp has also been tested between the two servers SGBGEPROD2<====>bkp_swift1 and is effective.

But when I attempt to carry out similar configuration between nod1 SGBGEPROD1 and the windows2003 server bkp_swift1,I encountered the following problem:

An attempt to ssh from:
node1 SGBGEPROD1 to the windows server 2003bkp_swift1
gives the following error message:
ssh_exchange_identification:connexion closed by remote host
Meanwhile, an ssh from the:
windows server 2003 bkp_swift1 to nod1 SGBGEPRD1 is successful as well as the file transfer.

Thanks for helping me to solve the problem ie configure ssh connexion from: node1 SGBGEPROD1 to the windows 2003 server bkp-swift1.

Regards.

Hi TIAHA David,

Please tell us what command you used to get this error.

Also, please provide the output from the command (run from your 'node1'):

ssh -vvv bkp_swift1

Thanks.

Hi RIZ,
Thanks for your concern.
In fact the command I use is:
#ssh bkp_swift (from node1)

below are the last five lines provided by the output from the command
#ssh -vvv bkp_swift1 (run from node 1):

debug2:key_type_from_name:unknown key type '-----END'
debug3:key_read:missing keytype
debug1:identity file /.ssh/id_rsa type 1
debug1:identity file /.ssh/id_rsa type -1
ssh_exhchange_identification:Connexion closed by remote host

Once more thanks for the concern

TIAHA David

Hello again,

A bit of searching found this thread: link

It doesn't strictly apply, as you're connecting to a Windows host, which doesn't have an /etc/hosts.deny file. However it presents an interesting avenue of investigation...

Can you SSH to 'localhost' when you're on the Windows host's command-line?
Are you running any Firewall software on the Windows host?
Have you looked in TCP/IP filtering under network properties, to see if the protocol/port is disabled?
Do you see any kind of 'SSH' prompt if you try and 'telnet bkp_swift 22'?

It definitely has the feel of a Network issue.

Good hunting.

Hi RIZ once more,

An ssh localhost on the Windows Server 2003 (bkp_swift1) works perfectly.
Also my Windows host has an /etc/hosts.deny file which is set as below:

ALL:ALL EXCEPT localhostENY

My supprise is that
an ssh from node2(SGBGEPROD2)=====> bkp_swift1(Windows Server2003) works perfectly.
But it is an ssh from node1 (SGBGEPROD1)===>bkp_swift1(Windows Server2003) that gives this error.
Whereas, an ssh from bkp_swift1 (Windows Server2003)====>node1 (SGBGEPROD1) also works perfectly.
All these servers are on the same lan. There is no firewall on the windows host.

Once more, your hints are wellcome

TIAHA David

You're right, it is a surprise that you can connect from anywhere with a hosts.deny file that is set to deny everything except traffic from the localhost.

Perhaps there are some more exemptions in /etc/hosts.allow that for some reason allows NODE2 to connect.

If I was you, I'd start by looking at these files.
First, comment-out all the lines in /etc/hosts.allow and /etc/hosts.deny.
Now re-try your SSH from NODE1 -- if it works, you know these files are the problem.

I wouldn't leave everything commented-out though, it's a bit of a security hole. If it does fix it, you should probably read up on these files and find a way of allowing the traffic.

Probably something like:

/etc/hosts.allow
Good luck.

1 members found this post helpful.

Hi RIZ,

Your hints have been very useful to me. I can now ssh from node1 to the Windows Server2003 (bkp_swift1).
I first of all commented everything in the host.deny file and it did not solve the problem. I then commented everything in the host.allow file except the line
sshd : ALL : allow
and this was the final magic that oppened the way from node1 to the Windows Server 2003. Once more, thank you for your help.

I wish I could have your phone and mail contacts as I believe you could be very helpful to me in my AIX problems. I am actually the administrator of this cluster of AIX servers in a bank located in Malabo (Equatorial Guinea), a country in Central Africa. My phone number is: +240 595283. My mail is: dtiaha@gmail.com

Best regards.

TIAHA David
SGBGE

Hi TIAHA David,

I'm glad I could help.

Feel free to contact me whenever you like.
You can send me a PM through this site, or use the email functionality.
Add me to your LinuxQuestions.org 'Contacts'.

I'm usually around and if not, the site sends me email alerts when someone's trying to get in touch!

Speak to you soon.