LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices


Reply
  Search this Thread
Old 04-22-2011, 05:01 PM   #1
rpm048
LQ Newbie
 
Registered: Apr 2011
Posts: 3

Rep: Reputation: 0
SSH unable to access


Hi everyone, i would like to know your advice, i am accessing a rhel remotely through vpn. and i was unable to access this server since few days ago. The port is open however the connection seems it dropped.

This happens also last time and i did hard reboot and it works. As much as possible i want to fix it remotely so that i don't have to go the data center.

regards,

Filezella
Status: Connecting to 10.114.2.27...
Response: fzSftp started
Command: open "root@10.114.2.27" 22
Error: Connection timed out
Error: Could not connect to server
Status: Waiting to retry...
Status: Connecting to 10.114.2.27...


===========================================================
$ping 10.114.2.27
PING 10.114.2.27 (10.114.2.27) 56(84) bytes of data.
64 bytes from 10.114.2.27: icmp_seq=0 ttl=64 time=0.169 ms
64 bytes from 10.114.2.27: icmp_seq=1 ttl=64 time=0.148 ms
64 bytes from 10.114.2.27: icmp_seq=2 ttl=64 time=0.145 ms

--- 10.114.2.27 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.145/0.154/0.169/0.010 ms, pipe 2
===========================================================

$telnet 10.114.2.27 22
Trying 10.114.2.27...
Connected to 10.114.2.27.
Escape character is '^]'.
^]
telnet> quit
Connection closed.

$nmap 10.114.2.27
Starting nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2011-04-23 13:49 PHT
Interesting ports on 10.114.2.27:
(The 1656 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
22/tcp open ssh
111/tcp open rpcbind
113/tcp open auth
723/tcp open omfs
 
Old 04-22-2011, 05:06 PM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
This information shows us pretty clearly that the service is not responding, but unfortunately provides no clues as to why the SSH daemon is not functioning properly.

Can you post any log messages that relate to SSH? What SSH server specifically is being used? Have you made any modifications to the SSH configuration, and if so, what? With more information about the system itself, we can start troubleshooting the actual cause of the problem, rather than the symptom.
 
Old 04-22-2011, 05:06 PM   #3
tanvir1
LQ Newbie
 
Registered: Apr 2009
Location: Canberra, Australia
Posts: 7

Rep: Reputation: Disabled
Have you looked at the /var/log/secure output on your server?
 
Old 04-22-2011, 05:10 PM   #4
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
Try using "ssh -vv" to provide more debug information. Use ssh instead of filezilla to test the connection.

Does the server use a super daemon (like xinetd) to accept ssh connections? I'm wondering why telnet was able to create a connection but ssh doesn't. For example, is the sshd daemon running?

Last edited by jschiwal; 04-22-2011 at 05:24 PM.
 
Old 04-22-2011, 05:19 PM   #5
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
The telnet(1) and nmap(1) output show that a tcp handshake to port 22 is succeeding. But there is no sshd banner in the telnet(1) output - odd.

As mentioned, you need to review /var/log/secure on the server itself for clues.
 
Old 04-23-2011, 03:39 AM   #6
rpm048
LQ Newbie
 
Registered: Apr 2011
Posts: 3

Original Poster
Rep: Reputation: 0
Thanks Guys for the response, the schedule for activity is by next week to the data center i cannot check the server itself. for now see the verbos mode.


$ssh -vv 10.114.2.27
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to 10.114.2.27 [10.114.2.27] port 22.
debug1: Connection established.
debug1: identity file /app1/am/.ssh/identity type -1
debug1: identity file /app1/am/.ssh/id_rsa type -1
debug1: identity file /app1/am/.ssh/id_dsa type -1

==end==
 
Old 04-24-2011, 04:03 PM   #7
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
Is there more to the debug file? Do you use pubkey authentication?
for a comparison:
Code:
...
debug1: Connecting to elite [192.168.1.106] port 22.
debug1: Connection established.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug2: key_type_from_name: unknown key type '-----END'
debug1: identity file /home/jschiwal/.ssh/id_rsa type 1
debug1: identity file /home/jschiwal/.ssh/id_rsa-cert type -1
debug1: identity file /home/jschiwal/.ssh/id_dsa type -1
debug1: identity file /home/jschiwal/.ssh/id_dsa-cert type -1
debug1: identity file /home/jschiwal/.ssh/id_ecdsa type -1
debug1: identity file /home/jschiwal/.ssh/id_ecdsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.8
debug1: match: OpenSSH_5.8 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.8
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
Either something else is using port 22; but the "debug2: ssh_connect: needpriv 0" line indicates that sshd is running on the target; or you don't have a keypair generated. I don't see how you don't have any more debug information.

Generate a keypair for your client and try again. See what the debug information says then.
 
Old 04-25-2011, 03:14 AM   #8
rpm048
LQ Newbie
 
Registered: Apr 2011
Posts: 3

Original Poster
Rep: Reputation: 0
Thank you for all the response. the main issue is the disk device is not responding which causes the system to hang.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Unable to access SSH and DirectAdmin from 1 IP but all other OKAY. Randvegeta Linux - Server 12 10-10-2010 11:11 PM
Fedora 10/unable to ssh out from box to remote host (SSH within LAN ok) huskeypm Linux - Networking 3 04-14-2009 07:37 PM
SSH access problems: Can only allow users SSH access by adding to root group dhupke Slackware 10 12-21-2008 09:48 AM
Using DSL and ssh / ssh-server to access the Windoze desktop GUI On2ndThought Linux - Server 4 11-16-2008 02:17 PM
Unable to access my ssh server and ftp server from the Internet, but smtp works foxone Linux - Networking 1 05-28-2004 05:17 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat

All times are GMT -5. The time now is 02:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration