openssh hangs on remote login

From: brian hutson <bhutson(at)netstarnetworks.com>
Date: Tue Jan 21 2003 - 17:09:32 EST

('binary' encoding is not supported, stored as-is)

We are having an issue with openssh on solaris 8 If a user tries to log in remotely via ssh using password authentication the login hangs after requesting a login. In addition all the commands can be run locally without issue.Curiously if a username not on the system is specified ie ssh -v -l foobar hostsystem ssh will run through to the password request. We have a near identical system running openssh beside it without any issue.
debug logs attached
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f debug1: Reading configuration data
/usr/local/etc/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.

debug1: ssh_connect: needpriv 0
debug1: Connecting to 10.89.22.18 [10.89.22.18] port 22.
debug1: Connection established.
debug1: identity file /.ssh/identity type -1
debug1: identity file /.ssh/id_rsa type -1
debug1: identity file /.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software

version OpenSSH_3.4p1
debug1: match: OpenSSH_3.4p1 pat OpenSSH* Enabling compatibility mode for protocol 2.0

debug1: Local version string SSH-2.0-OpenSSH_3.4p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 128/256
debug1: bits set: 1537/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY

The authenticity of host '10.89.22.18 (10.89.22.18)' can't be established.
RSA key fingerprint is
b0:f2:d9:2f:20:e7:03:5b:16:87:35:92:9b:c2:7a:b5. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '10.89.22.18' (RSA) to the list of known hosts.

debug1: bits set: 1606/3191
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT

Server listening on :: port 22.
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Server will not fork when running in debugging mode.
Connection from 10.89.22.50 port 32789
debug1: Client protocol version 2.0; client software version OpenSSH_3.5p1 Debia
n 1:3.5p1-4
debug1: match: OpenSSH_3.5p1 Debian 1:3.5p1-4 pat OpenSSH* Enabling compatibility mode for protocol 2.0

debug1: Local version string SSH-2.0-OpenSSH_3.4p1
debug1: list_hostkey_types: ssh-rsa,ssh-dss
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
debug1: dh_gen_key: priv key bits set: 144/256
debug1: bits set: 1567/3191
debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
debug1: bits set: 1594/3191
debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related securityfocus.com Links
bugtraq
certification
focus-bsd
focus-ids
focus-ih
focus-linux
focus-ms
focus-sun
focus-unix-other
focus-virus
forensics
incidents
libnet
linux-secnews
ms-secnews
pen-test
secpapers
secprog
sectools
secureshell
security-basics
securityjobs
sf-news
vuln-dev
webappsec
Request more information about Pantek
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user root service

ssh-connection method none
debug1: attempt 0 failures 0
debug1: Starting up PAM with username "root"

###############################################################################

Debug Level 3:

debug1: Starting up PAM with username "root"
debug3: Trying to reverse map address 10.89.22.50.
debug3: mm_inform_authserv entering
debug3: mm_request_send entering: type 3
debug2: input_userauth_request: try method none
debug3: mm_auth_password entering
debug3: mm_request_send entering: type 10
debug3: mm_auth_password: waiting for

MONITOR_ANS_AUTHPASSWORD
debug3: mm_request_receive_expect entering: type 11 debug3: mm_request_receive entering

any help appreciated
regards
Brian Hutson Received on Thu Jan 23 11:14:52 2003