Home

Advertisement

Customize
 
Previous | Memories | Tell a Friend | Next
 
Scott Mohnkern
mohnkern
08 July 2009 @ 04:31 pm
An interesting technical quandry  

We're having this problem where when we ssh from one machine to another it just "hangs" and doesn't ever respond. Let me explain the environment, what we've tested, and then I'm open to suggestions.

The Environment
We've got 4 machines (actually it's a lot more, but this makes it easy).

A & B are on one network.
C is on another Network
D is yet on a third network.

I recently upgraded D from RHEL 3 to RHEL 5.

After the install I can ssh from A or B to D without any problem, with C to D I put in the ssh and it hangs, for minutes, I got tired of waiting.

However ftp and http from C to D work just fine.

What we've tried

  • /etc/hosts.allow and /etc/hosts.deny have been checked
  • ssh keys have been checked.
  • I shut off iptables, to make sure that wasn't the problem.
  • sshd_config copied from backup of old machine.
    </ol>
    I can't figure out why only ssh would be affected. Any suggestions?
 
6 comments | Leave a comment
 
( 6 comments — Post a new comment )
Scott Nolan: dude[info]snolan on July 8th, 2009 10:10 pm (UTC)
Is the old host credentials (pre RHEL upgrade) still in the personal known_hosts file on the non-upgraded host?
Moira[info]moiramisu on July 9th, 2009 12:18 am (UTC)
What about /etc/known_hosts? Maybe there's a bad entry? You can try deleting, see if it readds.
Hanover Fiste[info]hanov3r on July 9th, 2009 02:23 am (UTC)
'ssh -vvv user@D' tell you anything interesting? At what point does it hang?

Scott Mohnkern[info]mohnkern on July 9th, 2009 01:23 pm (UTC)
Problem solved
Problem solved, boss put in firewall, forgot to put in a rule. Have a nice day :)
SilverAdept[info]asa101 on July 9th, 2009 11:55 am (UTC)
check dns
Check your dns, specifically making sure that from D you can do a reverse look up
SilverAdept[info]asa101 on July 9th, 2009 12:10 pm (UTC)
check dns
Check your dns, specifically making sure that from D you can do a reverse look up.
Turn on hostbased authentication in the config file on both the client and the server also.
With it turned on (off by default) and reverse lookup working for client and server you should be back in business.
I'll send you a line that is relevant, this interface on the g1 sucks for flipping between browser windows.
(* I have had this issue before and that fixed it *)
 
 

Advertisement

Customize