Can't initialize tunnel #298

infectormp · 2016-03-21T14:42:07Z

infectormp
Mar 21, 2016

I setup SSH Tunnel for mysql connect with auth. method pass and when i press Test connection i get

DBCException: Can't initialize tunnel
  DBException: Cannot establish tunnel
    com.jcraft.jsch.JSchException: JSchException: Auth fail

in ssh log i see
Received disconnect from xxx: com.jcraft.jsch.JSchException: Auth fail [preauth]

Same problem i found in syncany git and it was fixed by this commit, maybe this help you.

serge-rider · 2016-03-21T14:55:42Z

serge-rider
Mar 21, 2016
Maintainer

Please check debug log ($HOME/.dbeaver/.metadata/dbeaver-debug.log)
It contains pretty much debug logs for SSH, lines with prefix "SSH INFO:".
Post them here if they contain anything interesting.

0 replies

infectormp · 2016-03-21T16:42:13Z

infectormp
Mar 21, 2016
Author

debug log

2016-03-21 18:37:08.931 - SSH INFO: Connecting to X.X.X.X port 22
2016-03-21 18:37:08.936 - SSH INFO: Connection established
2016-03-21 18:37:08.942 - SSH INFO: Remote version string: SSH-2.0-OpenSSH_7.2
2016-03-21 18:37:08.943 - SSH INFO: Local version string: SSH-2.0-JSCH-0.1.53
2016-03-21 18:37:08.943 - SSH INFO: CheckCiphers: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
2016-03-21 18:37:08.944 - SSH INFO: aes256-ctr is not available.
2016-03-21 18:37:08.944 - SSH INFO: aes192-ctr is not available.
2016-03-21 18:37:08.944 - SSH INFO: aes256-cbc is not available.
2016-03-21 18:37:08.945 - SSH INFO: aes192-cbc is not available.
2016-03-21 18:37:08.945 - SSH INFO: CheckKexes: diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
2016-03-21 18:37:08.966 - SSH INFO: diffie-hellman-group14-sha1 is not available.
2016-03-21 18:37:08.967 - SSH INFO: CheckSignatures: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
2016-03-21 18:37:08.967 - SSH INFO: SSH_MSG_KEXINIT sent
2016-03-21 18:37:08.970 - SSH INFO: SSH_MSG_KEXINIT received
2016-03-21 18:37:08.970 - SSH INFO: kex: server: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1
2016-03-21 18:37:08.971 - SSH INFO: kex: server: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
2016-03-21 18:37:08.971 - SSH INFO: kex: server: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected]
2016-03-21 18:37:08.971 - SSH INFO: kex: server: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected]
2016-03-21 18:37:08.971 - SSH INFO: kex: server: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
2016-03-21 18:37:08.971 - SSH INFO: kex: server: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
2016-03-21 18:37:08.972 - SSH INFO: kex: server: none,[email protected]
2016-03-21 18:37:08.972 - SSH INFO: kex: server: none,[email protected]
2016-03-21 18:37:08.972 - SSH INFO: kex: server: 
2016-03-21 18:37:08.972 - SSH INFO: kex: server: 
2016-03-21 18:37:08.973 - SSH INFO: kex: client: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
2016-03-21 18:37:08.973 - SSH INFO: kex: client: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
2016-03-21 18:37:08.973 - SSH INFO: kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
2016-03-21 18:37:08.973 - SSH INFO: kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc
2016-03-21 18:37:08.973 - SSH INFO: kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
2016-03-21 18:37:08.974 - SSH INFO: kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
2016-03-21 18:37:08.974 - SSH INFO: kex: client: none
2016-03-21 18:37:08.974 - SSH INFO: kex: client: none
2016-03-21 18:37:08.974 - SSH INFO: kex: client: 
2016-03-21 18:37:08.974 - SSH INFO: kex: client: 
2016-03-21 18:37:08.975 - SSH INFO: kex: server->client aes128-ctr hmac-sha1 none
2016-03-21 18:37:08.975 - SSH INFO: kex: client->server aes128-ctr hmac-sha1 none
2016-03-21 18:37:08.977 - SSH INFO: SSH_MSG_KEX_ECDH_INIT sent
2016-03-21 18:37:08.977 - SSH INFO: expecting SSH_MSG_KEX_ECDH_REPLY
2016-03-21 18:37:08.984 - SSH INFO: ssh_rsa_verify: signature true
2016-03-21 18:37:08.984 - SSH INFO: Host 'X.X.X.X' is known and matches the RSA host key
2016-03-21 18:37:08.985 - SSH INFO: SSH_MSG_NEWKEYS sent
2016-03-21 18:37:08.985 - SSH INFO: SSH_MSG_NEWKEYS received
2016-03-21 18:37:08.985 - SSH INFO: SSH_MSG_SERVICE_REQUEST sent
2016-03-21 18:37:08.989 - SSH INFO: SSH_MSG_SERVICE_ACCEPT received
2016-03-21 18:37:08.993 - SSH INFO: Disconnecting from X.X.X.X port 22
2016-03-21 18:37:08.993 - Connection failed (mariaDB-153995345d1-62032429b63a55a0)
2016-03-21 18:37:08.996 - org.jkiss.dbeaver.model.exec.DBCException: Can't initialize tunnel
    at org.jkiss.dbeaver.registry.DataSourceDescriptor.connect(DataSourceDescriptor.java:588)
    at org.jkiss.dbeaver.runtime.jobs.ConnectJob.run(ConnectJob.java:71)
    at org.jkiss.dbeaver.ui.dialogs.connection.ConnectionWizard$ConnectionTester.run(ConnectionWizard.java:210)
    at org.jkiss.dbeaver.model.runtime.AbstractJob.run(AbstractJob.java:99)
    at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)
Caused by: org.jkiss.dbeaver.DBException: Cannot establish tunnel
    at org.jkiss.dbeaver.model.impl.net.SSHTunnelImpl.initializeTunnel(SSHTunnelImpl.java:144)
    at org.jkiss.dbeaver.registry.DataSourceDescriptor.connect(DataSourceDescriptor.java:586)
    ... 4 more
Caused by: com.jcraft.jsch.JSchException: Auth fail
    at com.jcraft.jsch.Session.connect(Session.java:512)
    at org.jkiss.dbeaver.model.impl.net.SSHTunnelImpl.initializeTunnel(SSHTunnelImpl.java:133)
    ... 5 more

0 replies

serge-rider · 2016-03-21T17:03:47Z

serge-rider
Mar 21, 2016
Maintainer

I don't see any error which points on some bug.
And it is definitely not a wrong password.
Log looks like your server doesn't accept password authentication (maybe it accepts only public key?). Can you verify that password auth works there?
Provide any additional details, is there anything specific about SSH server?

syncany commit doesn't explain anything. Looks like a bugfix of password authentication.
DBeaver works with both password/public key authentications (this is a very old feature successfully used by thousands of people over a years).

0 replies

infectormp · 2016-03-21T17:09:23Z

infectormp
Mar 21, 2016
Author

No, server accept password login by root (I try root in this connect). Password not wrong.

0 replies

infectormp · 2016-03-21T17:10:23Z

infectormp
Mar 21, 2016
Author

I'll try run sshd with debug

0 replies

infectormp · 2016-03-21T17:19:52Z

infectormp
Mar 21, 2016
Author

DEBUG from sshd

Connection from X.X.X.X port 50007 on X.X.X.X port 22
debug1: Client protocol version 2.0; client software version JSCH-0.1.53
debug1: no match: JSCH-0.1.53
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.2
debug2: fd 3 setting O_NONBLOCK
debug3: ssh_sandbox_init: preparing seccomp filter sandbox
debug2: Network child is on pid 1976
debug3: preauth child monitor started
debug3: privsep user:group 22:22 [preauth]
debug1: permanently_set_uid: 22/22 [preauth]
debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
debug3: list_hostkey_types: ssh-dss key not permitted by HostkeyAlgorithms [preauth]
debug1: list_hostkey_types: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
debug3: send packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT sent [preauth]
debug3: receive packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT received [preauth]
debug2: local server KEXINIT proposal [preauth]
debug2: KEX algorithms: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
debug2: ciphers ctos: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
debug2: ciphers stoc: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: none,[email protected] [preauth]
debug2: compression stoc: none,[email protected] [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug2: peer client KEXINIT proposal [preauth]
debug2: KEX algorithms: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
debug2: host key algorithms: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521 [preauth]
debug2: ciphers ctos: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc [preauth]
debug2: ciphers stoc: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc [preauth]
debug2: MACs ctos: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96 [preauth]
debug2: MACs stoc: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96 [preauth]
debug2: compression ctos: none [preauth]
debug2: compression stoc: none [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug1: kex: algorithm: ecdh-sha2-nistp256 [preauth]
debug1: kex: host key algorithm: ssh-rsa [preauth]
debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha1 compression: none [preauth]
debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha1 compression: none [preauth]
debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
debug3: receive packet: type 30 [preauth]
debug3: mm_key_sign entering [preauth]
debug3: mm_request_send entering: type 6 [preauth]
debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
debug3: mm_request_receive_expect entering: type 7 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 6
debug3: mm_answer_sign
debug3: mm_answer_sign: hostkey proof signature 0x5585cae1c3f0(271)
debug3: mm_request_send entering: type 7
debug2: monitor_read: 6 used once, disabling now
debug3: send packet: type 31 [preauth]
debug3: send packet: type 21 [preauth]
debug2: set_newkeys: mode 1 [preauth]
debug1: rekey after 4294967296 blocks [preauth]
debug1: SSH2_MSG_NEWKEYS sent [preauth]
debug1: expecting SSH2_MSG_NEWKEYS [preauth]
debug3: receive packet: type 21 [preauth]
debug2: set_newkeys: mode 0 [preauth]
debug1: rekey after 4294967296 blocks [preauth]
debug1: SSH2_MSG_NEWKEYS received [preauth]
debug1: KEX done [preauth]
debug3: receive packet: type 5 [preauth]
debug3: send packet: type 6 [preauth]
debug3: receive packet: type 50 [preauth]
debug1: userauth-request for user root service ssh-connection method none [preauth]
debug1: attempt 0 failures 0 [preauth]
debug3: mm_getpwnamallow entering [preauth]
debug3: mm_request_send entering: type 8 [preauth]
debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
debug3: mm_request_receive_expect entering: type 9 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 8
debug3: mm_answer_pwnamallow
debug2: parse_server_config: config reprocess config len 294
debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
debug3: mm_request_send entering: type 9
debug2: monitor_read: 8 used once, disabling now
debug2: input_userauth_request: setting up authctxt for root [preauth]
debug3: mm_start_pam entering [preauth]
debug3: mm_request_send entering: type 100 [preauth]
debug3: mm_inform_authserv entering [preauth]
debug3: mm_request_send entering: type 4 [preauth]
debug2: input_userauth_request: try method none [preauth]
debug3: userauth_finish: failure partial=0 next methods="publickey,keyboard-interactive" [preauth]
debug3: send packet: type 51 [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 100
debug1: PAM: initializing for "root"
debug1: PAM: setting PAM_RHOST to "X.X.X.X"
debug1: PAM: setting PAM_TTY to "ssh"
debug2: monitor_read: 100 used once, disabling now
debug3: mm_request_receive entering
debug3: monitor_read: checking request 4
debug3: mm_answer_authserv: service=ssh-connection, style=
debug2: monitor_read: 4 used once, disabling now
debug3: receive packet: type 1 [preauth]
Received disconnect from X.X.X.X port 50007:3: com.jcraft.jsch.JSchException: Auth fail [preauth]
Disconnected from X.X.X.X port 50007 [preauth]

0 replies

serge-rider · 2016-03-21T17:53:59Z

serge-rider
Mar 21, 2016
Maintainer

Could you post sshd log for successful login? I wondering what authentication method/algorithm should be used.

Maybe there is some issue with key exchange algorithms.
Check this: http://stackoverflow.com/questions/26424621/algorithm-negotiation-fail-ssh-in-jenkins
I can't validate any of that ideas because I can't reproduce the problem and can't figure out what is the actual problem.

0 replies

infectormp · 2016-03-21T18:14:24Z

infectormp
Mar 21, 2016
Author

i cut log a bit for success login

Connection from X.X.X.X port 50672 on X.X.X.X port 22
debug1: Client protocol version 2.0; client software version PuTTY_Release_0.64
debug1: match: PuTTY_Release_0.64 pat PuTTY_Local:*,PuTTY-Release-0.5*,PuTTY_Release_0.5*,PuTTY_Release_0.60*,PuTTY_Release_0.61*,PuTTY_Release_0.62*,PuTTY_Release_0.63*,PuTTY_Release_0.64* compat 0x00004000
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.2
debug2: fd 3 setting O_NONBLOCK
debug3: ssh_sandbox_init: preparing seccomp filter sandbox
debug2: Network child is on pid 2100
debug3: preauth child monitor started
debug3: privsep user:group 22:22 [preauth]
debug1: permanently_set_uid: 22/22 [preauth]
debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
debug2: compat_kex_proposal: original KEX proposal: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
debug2: Compat: skipping algorithm "diffie-hellman-group-exchange-sha256" [preauth]
debug2: compat_kex_proposal: compat KEX proposal: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1 [preauth]
debug3: list_hostkey_types: ssh-dss key not permitted by HostkeyAlgorithms [preauth]
debug1: list_hostkey_types: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
debug3: send packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT sent [preauth]
debug3: receive packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT received [preauth]
debug2: local server KEXINIT proposal [preauth]
debug2: KEX algorithms: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1 [preauth]
debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
debug2: ciphers ctos: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
debug2: ciphers stoc: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: none,[email protected] [preauth]
debug2: compression stoc: none,[email protected] [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug2: peer client KEXINIT proposal [preauth]
debug2: KEX algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1 [preauth]
debug2: host key algorithms: ssh-rsa,ssh-dss [preauth]
debug2: ciphers ctos: aes256-ctr,aes256-cbc,[email protected],aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
debug2: ciphers stoc: aes256-ctr,aes256-cbc,[email protected],aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
debug2: MACs ctos: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5 [preauth]
debug2: MACs stoc: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5 [preauth]
debug2: compression ctos: none,zlib [preauth]
debug2: compression stoc: none,zlib [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug1: kex: algorithm: diffie-hellman-group14-sha1 [preauth]
debug1: kex: host key algorithm: ssh-rsa [preauth]
debug1: kex: client->server cipher: aes256-ctr MAC: hmac-sha2-256 compression: none [preauth]
debug1: kex: server->client cipher: aes256-ctr MAC: hmac-sha2-256 compression: none [preauth]
debug2: bits set: 1049/2048 [preauth]
debug1: expecting SSH2_MSG_KEXDH_INIT [preauth]
debug3: receive packet: type 30 [preauth]
debug2: bits set: 1032/2048 [preauth]
debug3: mm_key_sign entering [preauth]
debug3: mm_request_send entering: type 6 [preauth]
debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
debug3: mm_request_receive_expect entering: type 7 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 6
debug3: mm_answer_sign
debug3: mm_answer_sign: hostkey proof signature 0x5555fb3e6450(271)
debug3: mm_request_send entering: type 7
debug2: monitor_read: 6 used once, disabling now
debug3: send packet: type 31 [preauth]
debug3: send packet: type 21 [preauth]
debug2: set_newkeys: mode 1 [preauth]
debug1: rekey after 4294967296 blocks [preauth]
debug1: SSH2_MSG_NEWKEYS sent [preauth]
debug1: expecting SSH2_MSG_NEWKEYS [preauth]
debug3: receive packet: type 21 [preauth]
debug2: set_newkeys: mode 0 [preauth]
debug1: rekey after 4294967296 blocks [preauth]
debug1: SSH2_MSG_NEWKEYS received [preauth]
debug1: KEX done [preauth]
debug3: receive packet: type 5 [preauth]
debug3: send packet: type 6 [preauth]
debug3: receive packet: type 50 [preauth]
debug1: userauth-request for user root service ssh-connection method none [preauth]
debug1: attempt 0 failures 0 [preauth]
debug3: mm_getpwnamallow entering [preauth]
debug3: mm_request_send entering: type 8 [preauth]
debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
debug3: mm_request_receive_expect entering: type 9 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 8
debug3: mm_answer_pwnamallow
debug2: parse_server_config: config reprocess config len 295
debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
debug3: mm_request_send entering: type 9
debug2: monitor_read: 8 used once, disabling now
debug2: input_userauth_request: setting up authctxt for root [preauth]
debug3: mm_start_pam entering [preauth]
debug3: mm_request_send entering: type 100 [preauth]
debug3: mm_inform_authserv entering [preauth]
debug3: mm_request_send entering: type 4 [preauth]
debug2: input_userauth_request: try method none [preauth]
debug3: userauth_finish: failure partial=0 next methods="publickey,keyboard-interactive" [preauth]
debug3: send packet: type 51 [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 100
debug1: PAM: initializing for "root"
debug1: PAM: setting PAM_RHOST to "X.X.X.X"
debug1: PAM: setting PAM_TTY to "ssh"
debug2: monitor_read: 100 used once, disabling now
debug3: mm_request_receive entering
debug3: monitor_read: checking request 4
debug3: mm_answer_authserv: service=ssh-connection, style=
debug2: monitor_read: 4 used once, disabling now
here difference with prevouse log>>debug3: receive packet: type 50 [preauth]
debug1: userauth-request for user root service ssh-connection method keyboard-interactive [preauth]
debug1: attempt 1 failures 0 [preauth]
debug2: input_userauth_request: try method keyboard-interactive [preauth]
debug1: keyboard-interactive devs  [preauth]
debug1: auth2_challenge: user=root devs= [preauth]

0 replies

infectormp · 2016-03-21T18:19:14Z

infectormp
Mar 21, 2016
Author

i'll try to play with KEX algorithms and MACs

0 replies

infectormp · 2016-03-21T20:48:23Z

infectormp
Mar 21, 2016
Author

@serge-rider what version of openssh are you use?

0 replies

infectormp · 2016-03-21T21:09:24Z

infectormp
Mar 21, 2016
Author

is this possible change for testing kex: algorithm for JSCH?

0 replies

infectormp · 2016-03-21T21:44:24Z

infectormp
Mar 21, 2016
Author

Look like problem in JSCH
work with OpenSSH_5.3p1, OpenSSL 1.0.1e
not work with OpenSSH_7.2p2, OpenSSL 1.0.2g

0 replies

serge-rider · 2016-03-21T23:27:54Z

serge-rider
Mar 21, 2016
Maintainer

It definitely works with OpenSSH_6.6.1 and earlier. And at least with some 7.x versions too. JSch is the mainstream library in the Java world, I believe it is compatible with the most versions.

I can change most of JSch settings (including kex algorithms) but I need to know what to change.
I still have no clue what exactly causes this problem..

0 replies

codebling · 2016-03-22T22:46:55Z

codebling
Mar 22, 2016

I've an issue with JSch whereby it kept trying public-key only and never even tried the password method but instead just gave up when the public key was rejected. It looks like the same thing is happening here (difference between success log and failure log is that "keyboard-interactive" is tried in the former).

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

DBeaver

Can't initialize tunnel #298

{{title}}

Replies: 14 comments

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

DBeaver

Can't initialize tunnel #298

infectormp Mar 21, 2016

Replies: 14 comments

serge-rider Mar 21, 2016 Maintainer

infectormp Mar 21, 2016 Author

serge-rider Mar 21, 2016 Maintainer

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

serge-rider Mar 21, 2016 Maintainer

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

infectormp Mar 21, 2016 Author

serge-rider Mar 21, 2016 Maintainer

codebling Mar 22, 2016

infectormp
Mar 21, 2016

serge-rider
Mar 21, 2016
Maintainer

infectormp
Mar 21, 2016
Author

serge-rider
Mar 21, 2016
Maintainer

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

serge-rider
Mar 21, 2016
Maintainer

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

infectormp
Mar 21, 2016
Author

serge-rider
Mar 21, 2016
Maintainer

codebling
Mar 22, 2016