ssh login issue after patching


 
Thread Tools Search this Thread
Operating Systems Solaris ssh login issue after patching
# 8  
Old 11-23-2009
Yes, i'm working in the same VLAN so that is not the problem. I received the same ssh login problem for other server also, which was also at the same patch level as this server and when i patched that.
Checked the syslog and found same error: fatal: matching cipher is not supported: aes256-ctr
Uncommenting the line containing ciphers and restarting the ssh service, made it work.
# 9  
Old 02-01-2010
Check your Sol 10 release & patch rev

Not sure if youve resolved this yet. On solaris 10 releases prior to 10/08 installation there is no SUNWcry package (crypt). Once you update to kernel rev 139555-08 this problem will surface.
---------------------
Try pkginfo -l | grep SUNWcry

also check if patch 141742-02 is installed ( showrev -p | grep 141742-02 )
---------------------
if you do not have SUNWcry and DO have the above patch installed, pop a sol 10 10/08 CD/DVD and do a pkgadd of SUNWcry, then, remove and re-add 141742-02. Problem should disappear.
Newer releases of Sol10 came with SUNWcry so are no issue.
All above is based on SPARC, so if using opensolaris, or i386 sol10, you'll need to research the pacth number (same issue exists, but diff patch rev between arch).

Quick n nasty workarounds:
1 - if using putty, when opening a new session, go to the ssh section, and in the box titled "Encryption selection cipher" move blowfish to the top and try again.
2 - server side workaround:
Change the two config files /etc/ssh/ssh_config and /etc/ssh/sshd_config and add the following line:

Ciphers aes128-ctr,aes128-cbc,arcfour,3des-cbc,blowfish-cbc

then restart ssh

FYI, obviously by implementing the server side workaround,
you are leaving your system in a weaker state as far as
encyption goes.

CAVEAT: Make sure you read the pacth install instructions - can't
remember if it requires a reboot when removing/re-adding the patch.
# 10  
Old 02-01-2010
Quote:
Originally Posted by laxmikant
Hi Everybody,
Recently i applied patch cluster dated (2009.11.03) for solaris 10 sparc machine(Generic_138888-06)
Hi... when you apply the patch, is it need to boot to single mode?
# 11  
Old 02-01-2010
ssh login issue

As my caveat states, make sure you read the patch install instructions. Can't just give you all the answers Smilie
Having said that, SUN always recommend to install patches in single user mode. Sometimes that's not so practical, and I've generally applied patches running in multiuser with no issues esp if it's not a kernel patch.
If it goes wrong though, you wear it, because you didn't follow SUN's advice.

Cheers,
# 12  
Old 02-02-2010
Quote:
Originally Posted by SmartAntz
Hi... when you apply the patch, is it need to boot to single mode?
That is always the recommended method.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Red Hat

SSH login issue

Dear All , recently i have configured sftp for a user for which i have done chroot. but after this , sftp is working fine . but ssh is not working when we connect to the server. When we try to ssh <user>@<server ip> , the below is the error message that we get and not able to login. ... (2 Replies)
Discussion started by: jegaraman
2 Replies

2. Solaris

Ssh connection broke after patching

Hi, I have a user - e3t3user on two Solaris-10 servers. We did patching source server and after that e3t3user is not able to ssh from one server to another. Passwordless ssh connection is setup between both servers (with ssh keys share). I am not able to figure out, where it is failing. Here is... (1 Reply)
Discussion started by: solaris_1977
1 Replies

3. Red Hat

Unable to login after patching

Hello, Sorry for posting here..i know there is another section for Urgent...However, i could not locate it... Issue: ) After patching rhel 5.8 with couple of patches. When user is trying to login via putty . They get login promt and when they type their username, screen get freezed kindaa... (3 Replies)
Discussion started by: saurabh84g
3 Replies

4. SuSE

SSH issue - can't get password less login to work

Hello, I can't seem to get the password less login to work on one of my SLES 11 servers. My ssh agent lets me login to all my other servers, which are Solaris 10, RHEL 5, and SLES 11 servers. Some servers mount my home directory and others don't. The server that I'm having an issue with doesn't... (7 Replies)
Discussion started by: bitlord
7 Replies

5. Cybersecurity

SSH password-less login issue between linux and solaris

Hello Gurus, I am trying to set up bidirectional password-less login between a linux and a Solaris. The way I am doing is very simple, which is creating pub/priv key pairs on each host and add the pub key to each other's authorized_keys file: ssh-keygen -t rsa (I tried dsa, and it didn't work... (4 Replies)
Discussion started by: error_lee
4 Replies

6. Emergency UNIX and Linux Support

SSH password login issue

Hi All, I am facing issue in setting up passwordless login through ssh on two Solaris-10 boxes. user-id ravrwa from server tsapiq04-zrwdq01 should be able to login to server tsbrit03 as cpsuserq, which is not happening. I am not sure where is the problem, while keys are already all set. Here is... (14 Replies)
Discussion started by: solaris_1977
14 Replies

7. Solaris

Slow ssh connection after patching

I have Solaris-10 server which was patched by patch cluster last weekend. After patching, it connects slow with other server. Meaning, when I do - ssh server2 OR ssh wluser2@server2 OR ssh root@server2 It waits for 9-10 seconds and then prompt for password, while it used to be instant... (2 Replies)
Discussion started by: solaris_1977
2 Replies

8. Shell Programming and Scripting

issue while auto login using .ssh for HPUX

Hi, While trying to supress password prompt using ssh. I have added .ssh folder manually and generated public key and added to authorized_keys file in the remote machine. But still it's prompting for passwords with the following message: Permission denied... (5 Replies)
Discussion started by: 116@434
5 Replies

9. Solaris

passwordless login issue with ssh keys

Hi GUYS, Me have 2 servers, eg:: A & B id_dsa.pub key of B had been put in authorized_keys of A & Vice versa Passwordless login going from A to B. But while connecting from B to A ,its asking password Any one please help me out.. (6 Replies)
Discussion started by: racechap
6 Replies
Login or Register to Ask a Question