fatal: DH_GEX_REQUEST, bad parameter


 
Thread Tools Search this Thread
Operating Systems Solaris fatal: DH_GEX_REQUEST, bad parameter
# 1  
Old 03-20-2012
Network fatal: DH_GEX_REQUEST, bad parameter

HI,all

I'm SYS admin. when i doing healthcheck for the SUN M5000 server i found messages as below.

Code:
Mar 19 16:38:32 sccuossw1 sshd[10781]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:38:37 sccuossw1 in.dhcpd[5427]: [ID 603263 daemon.notice] No more IP addresses on 192.168.1.32 network (01001E6713DA9A)
Mar 19 16:38:42 sccuossw1 last message repeated 2 times
Mar 19 16:38:46 sccuossw1 sshd[10908]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:39:00 sccuossw1 sendmail[10358]: [ID 702911 mail.alert] unable to qualify my own domain name (sccuossw1) -- using short name
Mar 19 16:39:08 sccuossw1 sshd[11261]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:39:16 sccuossw1 sshd[11395]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:39:25 sccuossw1 sshd[11508]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:39:46 sccuossw1 in.dhcpd[5427]: [ID 603263 daemon.notice] No more IP addresses on 192.168.1.32 network (01001E6713DA9A)
Mar 19 16:39:52 sccuossw1 last message repeated 2 times
Mar 19 16:40:14 sccuossw1 sshd[13735]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046
Mar 19 16:40:46 sccuossw1 sshd[14643]: [ID 800047 auth.crit] fatal: DH_GEX_REQUEST, bad parameters: 1024 !< 2048 !< 2046

what is this messages mean? I haven't found some useful information by google.

Moderator's Comments:
Mod Comment Use code tags, see PM, thanks.

Last edited by anline5104; 03-20-2012 at 06:36 AM.. Reason: code tags
# 2  
Old 03-23-2012
A quick google myself shows this to be an error to do with the key exchange in ssh, a GEX request has three values:
minimal size in bits of an acceptable group
preferred size in bits of the group the server will send
maximal size in bits of an acceptable group

It feels like your sshd is trying to indicate a preferred size larger than it's maximal size.

First instinct: Someone put a rubbish sshd in place of the standard sun one, or it's a bung patch on sun's one.
Second thoughts: Someone installed a dodgy sshd as a backdoor / password snooper
Third thought: Check the config in /etc/ssh/sshd_config for crazy entries, also consider blowing away your host key and regenerating it (sshd host key, not ssh auth keys)

Other thoughts:
pkgchk, cksum against a known good sshd someplace, ldd to see what libraries it's using (OpenSSL vs SUNWSSL vs EVILHAX0Rssl)
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. What is on Your Mind?

PHP Fatal Errors During SSL Cert Management - PHP Fatal error: xc_fcntl_mutex failed

Today, I noticed some errors in our SSL cert renewal log files, mostly related to domains where the IP address had changed. Concerned about this, rebuilt out SSL cert, which normally goes well without a hiccup. However, for today, for some reason which I cannot explain, there was a PHP error... (0 Replies)
Discussion started by: Neo
0 Replies

2. Shell Programming and Scripting

Call Script with Parameter (that has another parameter)

Hi. How do I achieve this sh /EDWH-DMT02/script/MISC/exec_sql.sh "@/EDWH-DMT02/script/others/CSM_CKC/Complete_List.sql ${file_name}" Complete_List.txt The /EDWH-DMT02/script/MISC/exec_sql.sh has two parameters and it's working fine with this sh /EDWH-DMT02/script/MISC/exec_sql.sh... (7 Replies)
Discussion started by: aimy
7 Replies

3. Shell Programming and Scripting

Resolving a parameter which is passed as parameter

Hi, I have the following files. ->cat scr.sh export TMP_DIR=/home/user/folder1 export TMP_DIR_2=/home/user/folder2 while read line do cat "$line" done<file_list.dat ------------------------ -> cat file_list.dat $TMP_DIR/file1.txt $TMP_DIR_2/file2.txt --------------------------- -> cat... (6 Replies)
Discussion started by: barath
6 Replies

4. Shell Programming and Scripting

How to get the parameter value from the parameter file in perl?

hi all, i have a parameter file of following format, i want a method which can get the value of specific parameter. parameter file format: <Parameter Name="FileLocationWindows"> <Description> The directory location of the logger file. ... (1 Reply)
Discussion started by: laxmikant.hcl
1 Replies

5. Shell Programming and Scripting

Passing parameter to script, and split the parameter

i am passing input parameter 'one_two' to the script , the script output should display the result as below one_1two one_2two one_3two if then echo " Usage : <$0> <DATABASE> " exit 0 else for DB in 1 2 3 do DBname=`$DATABASE | awk -F "_" '{print $1_${DB}_$2}` done fi (5 Replies)
Discussion started by: only4satish
5 Replies

6. Shell Programming and Scripting

Command that takes one parameter and then searches for the passed in parameter

Hi I am looking for a unix command or a small shell script which can takes one parameter and then searches for the passed in the parameter in any or all files under say /home/dev/ Can anyone please help me on this? (3 Replies)
Discussion started by: pankaj80
3 Replies

7. Solaris

About DH_GEX_REQUEST, bad parameters

Dear all: I'm system administrator.when i doing healthcheck for the SUN M5000 server i found messages as below. Mar 19 16:38:37 sccuossw1 in.dhcpd: No more IP addresses on 192.168.1.32 network (01001E6713DA9A) Mar 19 16:38:42 sccuossw1 last message repeated 2 times Mar 19 16:38:46... (0 Replies)
Discussion started by: anline5104
0 Replies

8. Shell Programming and Scripting

Why I get bad bad substitution when using eval?

Why I get bad replace when using eval? $ map0=( "0" "0000" "0") $ i=0 $ eval echo \${map$i} 0000 $ a=`eval echo \${map$i}` !!!error happens!!! bash: ${map$i}: bad substitution How to resolve it ? Thanks! (5 Replies)
Discussion started by: 915086731
5 Replies

9. Shell Programming and Scripting

how do I make dynamic parameter names? Or get the value of a parameter evaluated twi

Say I write something like the following: var1=1 var2=2 for int in 1 2 do echo "\$var$int" done I want the output to be: 1 2 Instead I get something like: $var1 $var2 (2 Replies)
Discussion started by: Awanka
2 Replies
Login or Register to Ask a Question