From: Georges Toth (georges_at_norm.lu)
Date: Wed 09 Oct 2002 - 15:16:20 BST
> Is there any error-output from using `-v' to SSH:
> $ ssh -v user_at_vserver
here's the debug output....:
<ssh-output>
simon_at_xxxx:~> ssh -v -2 -C -l sim0n xxx.xxx.xxx.xxx
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090607f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to xxx.xxx.xxx.xxx [xxx.xxx.xxx.xxx] port 22.
debug1: Connection established.
debug1: identity file /home/simon/.ssh/id_rsa type -1
debug1: identity file /home/simon/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.4p1
debug1: match: OpenSSH_3.4p1 pat OpenSSH*
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.4p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 zlib
debug1: kex: client->server aes128-cbc hmac-md5 zlib
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 122/256
debug1: bits set: 1590/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'xxx.xxx.xxx.xxx' is known and matches the RSA host key.
debug1: Found key in /home/simon/.ssh/known_hosts:9
debug1: bits set: 1607/3191
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: Enabling compression at level 6.
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is publickey
debug1: userauth_pubkey_agent: testing agent key /home/simon/.ssh/id_dsa
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: try privkey: /home/simon/.ssh/id_rsa
debug1: try pubkey: /home/simon/.ssh/id_dsa
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is keyboard-interactive
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is password
sim0n_at_xxx.xxx.xxx.xxx's password:
debug1: ssh-userauth2 successful: method password
debug1: channel 0: new [client-session]
debug1: send channel open 0
debug1: Entering interactive session.
debug1: ssh_session2_setup: id 0
debug1: channel request 0: pty-req
debug1: channel request 0: shell
debug1: fd 3 setting TCP_NODELAY
debug1: channel 0: open confirm rwindow 0 rmax 32768
debug1: channel_free: channel 0: client-session, nchannels 1
Connection to xxx.xxx.xxx.xxx closed by remote host.
Connection to xxx.xxx.xxx.xxx closed.
debug1: Transferred: stdin 0, stdout 0, stderr 91 bytes in 0.1 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 988.7
debug1: Exit status -1
debug1: compress outgoing: raw data 2257, compressed 1191, factor 0.53
debug1: compress incoming: raw data 215, compressed 91, factor 0.42
</ssh-output>
if i try to login with root, it works though
(the shell is of course correctly checked..)
> > in fact NO program works which accesses files.
> Is this even when you've logged in as root to the vserver?
if i log in as "root", i can _nearly_ do everything (stuff like hostname or so
doesn't work, but compiling/installing stuff or starting services etc, does
work)
> > and even if logged in as root, and the user variable in shell,
> Are you definitely ``root'' within the vserver; what does this show:
> $ grep -A99 s_context /proc/self/status
<>
root # grep -A99 s_context /proc/self/status
s_context: 2 [ 2]
ctxticks: 170 0 20
ctxflags: 19
initpid: 2640
ipv4root: c5d618d4
ipv4root_bcast: dfd618d4
__NR_new_s_context: 243
__NR_set_ipv4root: 244 rev2
</>
> They don't care about the environment ("USER="), only the numeric user id,
> which you can find out by doing (is this zero?):
> $ id
yup:
<>
root # id
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)
</>
> Can you create/view files with simple utilities like:
> $ touch test-file
> $ cat > test-file-2
> $ cat /etc/passwd
yeah, that works
i've installed webmin, and it works to start services, change things....
but, i.e., the ftp server can't open the passwd file, webserver can't open
files, ssh server closes the connection, su doesn't work,.....
> > (machine running kernel2.4.19+xfs+vserver, devfs, /dev/pts, latest stable
> > libs,...)
>
> Is there a conflict with devfs and it's handling of `/dev' nodes?
> Are other people running with devfs successfully? I really have no
> idea how it works /within/ vservers...
i've tried to bind the real-host dev folder to the vhost dev folder....doesn't
change anything
;-(
-- regards, Georges Toth