2007-11-06T09:36:16Z

Bon.
L'hébergeur vient de faire apt-get upgrade, et ça marche.
Ce devait être un pépin de librairie,
mais je n'en comprends pas la cause :
j'ai rien changé sur ce serveur, moi.

J'inscris donc le tag [Résolu] en tête du sujet.
Résolu... mais inexpliqué.

2007-11-06T09:32:27Z

Par ailleurs,
si je compare les logs ssh des connexions avec un autre serveur, j'obtiens les différences suivantes :

86,87c86,87
< debug2: dh_gen_key: priv key bits set: 135/256
< debug2: bits set: 512/1024
---
> debug2: dh_gen_key: priv key bits set: 118/256
> debug2: bits set: 514/1024
91c91
< debug3: check_host_in_hostfile: match line 2
---
> debug3: check_host_in_hostfile: match line 1
93,94c93,94
< debug1: Found key in /home/pathe/.ssh/known_hosts:2
< debug2: bits set: 525/1024
---
> debug1: Found key in /home/pathe/.ssh/known_hosts:1
> debug2: bits set: 529/1024
103c103,220
< Disconnecting: Corrupted MAC on input.

Certaines différences sont explicables : la connexion qui fonctionne est le known_host:1, celle qui ne fonctionne pas est le known_host:2.
Ce que je ne comprends pas, c'est le << bits set: 525/1024 >> ou 529/1024.
Ça ne ferait pas écho avec le << bad packet length >> qui fait échouer la connexion ? D'autres idées ?

2007-11-06T08:55:36Z

J'avions déjà essayé :

$ ssh -vvv -1 -l www-data ~URL~
OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to ~URL~ port 22.
debug1: Connection established.
debug1: identity file /home/pathe/.ssh/identity type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat OpenSSH_3.*
Protocol major versions differ: 1 vs. 2

Alors que :

$ ssh -vvv -2 -l www-data ~URL~
OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to ~URL~ port 22.
debug1: Connection established.
debug3: Not a RSA1 key file /home/pathe/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/pathe/.ssh/id_rsa type 1
debug3: Not a RSA1 key file /home/pathe/.ssh/id_dsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/pathe/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat OpenSSH_3.*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9
debug2: fd 3 setting O_NONBLOCK
debug1: Miscellaneous failure
No credentials cache found
debug1: Miscellaneous failure
No credentials cache found
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,[email protected],zlib
debug2: kex_parse_kexinit: none,[email protected],zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit: none,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: dh_gen_key: priv key bits set: 135/256
debug2: bits set: 512/1024
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug3: check_host_in_hostfile: filename /home/pathe/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 2
debug1: Host '~URL~' is known and matches the RSA host key.
debug1: Found key in /home/pathe/.ssh/known_hosts:2
debug2: bits set: 525/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
Disconnecting: Corrupted MAC on input.

Je trouve ça parfaitement emmerdatoire. Et comme un con,
vu que ssh marchait super bien, j'ai pas installé de connexion FTP sur mon serveur...

2007-11-06T08:37:54Z

Salut,

Quelque post sur des mailing-list sur les net suggère que c'est peut-etre une incompatibilité de version entre le client et le serveur (SSH1 et SS2).

Essaye peut-être de te connecter avec les options -1 ou -2 pour voir si cela change quelque chose.

2007-11-05T23:02:33Z

Plus précisément :

$ ssh -l www-data URL
...
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
Disconnecting: Bad packet length 2058422994.
$

Alors que normalement :

...
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /home/pathe/.ssh/identity ((nil))
debug2: key: /home/pathe/.ssh/id_rsa (...)
debug2: key: /home/pathe/.ssh/id_dsa (...)
debug1: Authentications that can continue: publickey,password
...

Bref : il se passe quoi ?
Ça marchait parfaitement, jusqu'ici !

2007-11-05T22:48:02Z

Je ne réussis plus à me logger à mon serveur via ssh :

Received disconnect from URL: 2: Bad packet length 1447623159.

Je n'ai pas vraiment trouvé quoi que ce soit via google linux.
Quelqu'un a une idée ?
Ça devient critique, j'ai vraiment besoin de mon serveur.
Je l'ai fait rebooter - sans résultat.
Heeeelp !