Fwd: htc -> hts
Jon McClelland <[email protected]> Mon, 28 Jul 2014 02:56:38 +0100
| Newsgroups | gmane.comp.gnu.httptunnel.bugs |
|---|---|
| Message-ID | <CANkFVug=V-g7W8MNUU82gN8Q6iSMZmBqrKc3ongbbqVTUZmB6g@mail.gmail.com> |
--===============4288908618550872218== Content-Type: multipart/alternative; boundary=f46d04428fc2cc21f704ff373bf0 --f46d04428fc2cc21f704ff373bf0 Content-Type: text/plain; charset=UTF-8 Hi, I can get sftp to work via htc->hts, but I can't get a shell to work. Debug below. Have I configured something wrong, or does this look like a bug? I'm using the latest download (3.0.5). thanks, Jon *Setup the Server side* *# ./hts -F 192.168.1.4:22 <http://192.168.1.4:22> 2222* Jul 24 23:10:19 box1 hts[22997]: hts (httptunnel) *3.0.5* started with arguments: Jul 24 23:10:19 box1 hts[22997]: me = ./hts Jul 24 23:10:19 box1 hts[22997]: device = (null) Jul 24 23:10:19 box1 hts[22997]: port = 2222 Jul 24 23:10:19 box1 hts[22997]: forward_port = 22 Jul 24 23:10:19 box1 hts[22997]: forward_host = 192.168.1.4 Jul 24 23:10:19 box1 hts[22997]: content_length = 102400 Jul 24 23:10:19 box1 hts[22997]: debug_level = 0 Jul 24 23:10:19 box1 hts[22997]: pid_filename = (null) *Setup the Client side* *# ./htc -F 4444 192.168.1.4:2222 <http://192.168.1.4:2222> * Jul 24 23:10:51 box1 htc[23003]: htc (httptunnel) *3.0.5* started with arguments: Jul 24 23:10:51 box1 htc[23003]: me = ./htc Jul 24 23:10:51 box1 htc[23003]: device = (null) Jul 24 23:10:51 box1 htc[23003]: host_name = 192.168.1.4 Jul 24 23:10:51 box1 htc[23003]: host_port = 2222 Jul 24 23:10:51 box1 htc[23003]: proxy_name = (null) Jul 24 23:10:51 box1 htc[23003]: proxy_port = 8080 Jul 24 23:10:51 box1 htc[23003]: proxy_buffer_size = 0 Jul 24 23:10:51 box1 htc[23003]: proxy_buffer_timeout = -1 Jul 24 23:10:51 box1 htc[23003]: content_length = 102400 Jul 24 23:10:51 box1 htc[23003]: forward_port = 4444 Jul 24 23:10:51 box1 htc[23003]: max_connection_age = 300 Jul 24 23:10:51 box1 htc[23003]: strict_content_length = 0 Jul 24 23:10:51 box1 htc[23003]: keep_alive = 5 Jul 24 23:10:51 box1 htc[23003]: proxy_authorization = (null) Jul 24 23:10:51 box1 htc[23003]: user_agent = (null) Jul 24 23:10:51 box1 htc[23003]: debug_level = 0 Try to sftp, and it just works...! *$ sftp -p4444 [email protected] <[email protected]>* Connected to 192.168.1.4. sftp> pwd *Try to ssh via client port and it fails..* *$ ssh -vvv -p4444 [email protected] <[email protected]>* OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data /home/jon/.ssh/config debug1: /home/jon/.ssh/config line 1: Applying options for * debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug2: ssh_connect: needpriv 0 debug1: Connecting to 192.168.1.4 [192.168.1.4] port 4444. debug1: Connection established. debug3: Incorrect RSA1 identifier debug3: Could not load "/home/jon/.ssh/id_rsa" as a RSA1 public key debug1: identity file /home/jon/.ssh/id_rsa type 1 debug1: identity file /home/jon/.ssh/id_rsa-cert type -1 debug1: identity file /home/jon/.ssh/id_dsa type -1 debug1: identity file /home/jon/.ssh/id_dsa-cert type -1 debug1: identity file /home/jon/.ssh/id_ecdsa type -1 debug1: identity file /home/jon/.ssh/id_ecdsa-cert type -1 debug1: identity file /home/jon/.ssh/id_ed25519 type -1 debug1: identity file /home/jon/.ssh/id_ed25519-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 ssh_exchange_identification: Connection closed by remote host ..server side logs show... Jul 24 23:11:50 box1 htc[23003]: http_write_request: write error: Invalid argument Jul 24 23:11:50 box1 htc[23003]: couldn't open tunnel: Invalid argument Jul 24 23:11:50 box1 htc[23003]: exit with status = 1 Run ssh server in debug during above. Nothing disabled, so it seems no traffic comes out of hts from htc. htc->hts handshake broken?.. *# /usr/sbin/sshd -p22 -ddd* debug2: load_server_config: filename /etc/ssh/sshd_config debug2: load_server_config: done config len = 768 debug2: parse_server_config: config /etc/ssh/sshd_config len 768 debug3: /etc/ssh/sshd_config:5 setting Port 22 debug3: /etc/ssh/sshd_config:12 setting ListenAddress 192.168.1.4 debug3: /etc/ssh/sshd_config:13 setting Protocol 2 debug3: /etc/ssh/sshd_config:15 setting HostKey /etc/ssh/ssh_host_rsa_key debug3: /etc/ssh/sshd_config:16 setting HostKey /etc/ssh/ssh_host_dsa_key debug3: /etc/ssh/sshd_config:17 setting HostKey /etc/ssh/ssh_host_ecdsa_key debug3: /etc/ssh/sshd_config:18 setting HostKey /etc/ssh/ssh_host_ed25519_key debug3: /etc/ssh/sshd_config:20 setting UsePrivilegeSeparation yes debug3: /etc/ssh/sshd_config:23 setting KeyRegenerationInterval 3600 debug3: /etc/ssh/sshd_config:24 setting ServerKeyBits 1024 debug3: /etc/ssh/sshd_config:27 setting SyslogFacility AUTH debug3: /etc/ssh/sshd_config:28 setting LogLevel INFO debug3: /etc/ssh/sshd_config:31 setting LoginGraceTime 120 debug3: /etc/ssh/sshd_config:32 setting PermitRootLogin without-password debug3: /etc/ssh/sshd_config:33 setting StrictModes yes debug3: /etc/ssh/sshd_config:35 setting RSAAuthentication yes debug3: /etc/ssh/sshd_config:40 setting IgnoreRhosts yes debug3: /etc/ssh/sshd_config:42 setting RhostsRSAAuthentication no debug3: /etc/ssh/sshd_config:44 setting HostbasedAuthentication no debug3: /etc/ssh/sshd_config:49 setting PermitEmptyPasswords no debug3: /etc/ssh/sshd_config:53 setting ChallengeResponseAuthentication no debug3: /etc/ssh/sshd_config:56 setting PasswordAuthentication yes debug3: /etc/ssh/sshd_config:69 setting X11Forwarding yes debug3: /etc/ssh/sshd_config:70 setting X11DisplayOffset 10 debug3: /etc/ssh/sshd_config:71 setting PrintMotd no debug3: /etc/ssh/sshd_config:72 setting PrintLastLog yes debug3: /etc/ssh/sshd_config:73 setting TCPKeepAlive yes debug3: /etc/ssh/sshd_config:80 setting AcceptEnv LANG LC_* debug3: /etc/ssh/sshd_config:82 setting Subsystem sftp /usr/lib/openssh/sftp-server debug3: /etc/ssh/sshd_config:93 setting UsePAM yes debug1: sshd version OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug3: Incorrect RSA1 identifier debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type RSA debug3: Incorrect RSA1 identifier debug3: Could not load "/etc/ssh/ssh_host_rsa_key" as a RSA1 public key debug1: private host key: #0 type 1 RSA debug3: Incorrect RSA1 identifier debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type DSA debug3: Incorrect RSA1 identifier debug3: Could not load "/etc/ssh/ssh_host_dsa_key" as a RSA1 public key debug1: private host key: #1 type 2 DSA debug3: Incorrect RSA1 identifier debug1: key_parse_private2: missing begin marker debug1: read PEM private key done: type ECDSA debug3: Incorrect RSA1 identifier debug3: Could not load "/etc/ssh/ssh_host_ecdsa_key" as a RSA1 public key debug1: private host key: #2 type 3 ECDSA debug3: Incorrect RSA1 identifier debug3: Incorrect RSA1 identifier debug3: Could not load "/etc/ssh/ssh_host_ed25519_key" as a RSA1 public key debug1: private host key: #3 type 4 ED25519 debug1: rexec_argv[0]='/usr/sbin/sshd' debug1: rexec_argv[1]='-p22' debug1: rexec_argv[2]='-ddd' debug3: oom_adjust_setup Set /proc/self/oom_score_adj from 0 to -1000 debug2: fd 3 setting O_NONBLOCK debug1: Bind to port 22 on 192.168.1.4. Server listening on 192.168.1.4 port 22. <don't see any activity during *ssh* attempt. Traffic not getting out of hts tunnel?> ...but if I use *sftp*, the handshake works fine... debug3: fd 4 is not O_NONBLOCK debug1: Server will not fork when running in debugging mode. debug3: send_rexec_state: entering fd = 7 config len 768 debug3: ssh_msg_send: type 0 debug3: send_rexec_state: done debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7 debug1: inetd sockets after dupping: 3, 3 Connection from 192.168.1.4 port 50365 on 192.168.1.4 port 22 debug1: Client protocol version 2.0; client software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 pat OpenSSH_6.6.1* compat 0x04000000 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 debug2: fd 3 setting O_NONBLOCK debug2: Network child is on pid 24936 debug3: preauth child monitor started debug3: privsep user:group 119:65534 [preauth] debug1: permanently_set_uid: 119/65534 [preauth] debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] debug1: SSH2_MSG_KEXINIT sent [preauth] debug1: SSH2_MSG_KEXINIT received [preauth] debug2: kex_parse_kexinit: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, [email protected],[email protected],[email protected] ,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, [email protected] [preauth] debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, [email protected],[email protected],[email protected] ,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, [email protected] [preauth] debug2: kex_parse_kexinit: [email protected], [email protected],[email protected],[email protected], [email protected],[email protected], [email protected],[email protected], [email protected],hmac-md5,hmac-sha1,[email protected], [email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160, [email protected],hmac-sha1-96,hmac-md5-96 [preauth] debug2: kex_parse_kexinit: [email protected], [email protected],[email protected],[email protected], [email protected],[email protected], [email protected],[email protected], [email protected],hmac-md5,hmac-sha1,[email protected], [email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160, [email protected],hmac-sha1-96,hmac-md5-96 [preauth] debug2: kex_parse_kexinit: none,[email protected] [preauth] debug2: kex_parse_kexinit: none,[email protected] [preauth] debug2: kex_parse_kexinit: [preauth] debug2: kex_parse_kexinit: [preauth] debug2: kex_parse_kexinit: first_kex_follows 0 [preauth] debug2: kex_parse_kexinit: reserved 0 [preauth] debug2: kex_parse_kexinit: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] debug2: kex_parse_kexinit: [email protected], [email protected], [email protected] ,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521, [email protected],[email protected], [email protected],[email protected], [email protected],ssh-ed25519,ssh-rsa,ssh-dss [preauth] debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, [email protected],[email protected],[email protected] ,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, [email protected] [preauth] debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, [email protected],[email protected],[email protected] ,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour, [email protected] [preauth] debug2: kex_parse_kexinit: [email protected], [email protected],[email protected],[email protected], [email protected],[email protected], [email protected],[email protected], [email protected],hmac-md5,hmac-sha1,[email protected], [email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160, [email protected],hmac-sha1-96,hmac-md5-96 [preauth] debug2: kex_parse_kexinit: [email protected], [email protected],[email protected],[email protected], [email protected],[email protected], [email protected],[email protected], [email protected],hmac-md5,hmac-sha1,[email protected], [email protected],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160, [email protected],hmac-sha1-96,hmac-md5-96 [preauth] debug2: kex_parse_kexinit: none,[email protected],zlib [preauth] debug2: kex_parse_kexinit: none,[email protected],zlib [preauth] debug2: kex_parse_kexinit: [preauth] debug2: kex_parse_kexinit: [preauth] debug2: kex_parse_kexinit: first_kex_follows 0 [preauth] debug2: kex_parse_kexinit: reserved 0 [preauth] debug2: mac_setup: setup [email protected] [preauth] debug1: kex: client->server aes128-ctr [email protected] none [preauth] debug2: mac_setup: setup [email protected] [preauth] debug1: kex: server->client aes128-ctr [email protected] none [preauth] debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth] debug3: mm_key_sign entering [preauth] debug3: mm_request_send entering: type 6 [preauth] debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth] debug3: mm_request_receive_expect entering: type 7 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 6 debug3: mm_answer_sign debug3: mm_answer_sign: signature 0x7f15480e24c0(101) debug3: mm_request_send entering: type 7 debug2: monitor_read: 6 used once, disabling now debug2: kex_derive_keys [preauth] debug2: set_newkeys: mode 1 [preauth] debug1: SSH2_MSG_NEWKEYS sent [preauth] debug1: expecting SSH2_MSG_NEWKEYS [preauth] debug2: set_newkeys: mode 0 [preauth] debug1: SSH2_MSG_NEWKEYS received [preauth] debug1: KEX done [preauth] debug1: userauth-request for user jon service ssh-connection method none [preauth] debug1: attempt 0 failures 0 [preauth] debug3: mm_getpwnamallow entering [preauth] debug3: mm_request_send entering: type 8 [preauth] debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth] debug3: mm_request_receive_expect entering: type 9 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 8 debug3: mm_answer_pwnamallow debug3: Trying to reverse map address 192.168.1.4. debug2: parse_server_config: config reprocess config len 768 debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1 debug3: mm_request_send entering: type 9 debug2: monitor_read: 8 used once, disabling now debug2: input_userauth_request: setting up authctxt for jon [preauth] debug3: mm_start_pam entering [preauth] debug3: mm_request_send entering: type 100 [preauth] debug3: mm_inform_authserv entering [preauth] debug3: mm_request_send entering: type 4 [preauth] debug2: input_userauth_request: try method none [preauth] debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 100 debug1: PAM: initializing for "jon" debug1: PAM: setting PAM_RHOST to "192.168.1.4" debug1: PAM: setting PAM_TTY to "ssh" debug2: monitor_read: 100 used once, disabling now debug3: mm_request_receive entering debug3: monitor_read: checking request 4 debug3: mm_answer_authserv: service=ssh-connection, style=, role= debug2: monitor_read: 4 used once, disabling now ...enter password on client... debug1: userauth-request for user jon service ssh-connection method password [preauth] debug1: attempt 1 failures 0 [preauth] debug2: input_userauth_request: try method password [preauth] debug3: mm_auth_password entering [preauth] debug3: mm_request_send entering: type 12 [preauth] debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth] debug3: mm_request_receive_expect entering: type 13 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_request_receive entering debug3: monitor_read: checking request 12 debug3: PAM: sshpam_passwd_conv called with 1 messages debug1: PAM: password authentication accepted for jon debug3: mm_answer_authpassword: sending result 1 debug3: mm_request_send entering: type 13 debug3: mm_request_receive_expect entering: type 102 debug3: mm_request_receive entering debug1: do_pam_account: called debug3: PAM: do_pam_account pam_acct_mgmt = 0 (Success) debug3: mm_request_send entering: type 103 Accepted password for jon from 192.168.1.4 port 50365 ssh2 debug1: monitor_child_preauth: jon has been authenticated by privileged process debug3: mm_get_keystate: Waiting for new keys debug3: mm_request_receive_expect entering: type 26 debug3: mm_request_receive entering debug3: mm_newkeys_from_blob: 0x7f15480fb9f0(138) debug2: mac_setup: setup [email protected] debug3: mm_get_keystate: Waiting for second key debug3: mm_newkeys_from_blob: 0x7f15480fb9f0(138) debug2: mac_setup: setup [email protected] debug3: mm_get_keystate: Getting compression state debug3: mm_get_keystate: Getting Network I/O buffers debug3: mm_auth_password: user authenticated [preauth] debug3: mm_do_pam_account entering [preauth] debug3: mm_request_send entering: type 102 [preauth] debug3: mm_request_receive_expect entering: type 103 [preauth] debug3: mm_request_receive entering [preauth] debug3: mm_do_pam_account returning 1 [preauth] debug3: mm_send_keystate: Sending new keys: 0x7f15480e3b30 0x7f15480e48f0 [preauth] debug3: mm_newkeys_to_blob: converting 0x7f15480e3b30 [preauth] debug3: mm_newkeys_to_blob: converting 0x7f15480e48f0 [preauth] debug3: mm_send_keystate: New keys have been sent [preauth] debug3: mm_send_keystate: Sending compression state [preauth] debug3: mm_request_send entering: type 26 [preauth] debug3: mm_send_keystate: Finished sending state [preauth] debug1: monitor_read_log: child log fd closed debug3: mm_share_sync: Share sync debug3: mm_share_sync: Share sync end debug1: PAM: establishing credentials debug3: PAM: opening session debug3: PAM: sshpam_store_conv called with 1 messages User child is on pid 24974 debug1: SELinux support disabled debug1: PAM: establishing credentials debug1: permanently_set_uid: 1000/1000 debug2: set_newkeys: mode 0 debug2: set_newkeys: mode 1 debug1: Entering interactive session for SSH2. debug2: fd 6 setting O_NONBLOCK debug2: fd 8 setting O_NONBLOCK debug1: server_init_dispatch_20 debug1: server_input_channel_open: ctype session rchan 0 win 2097152 max 32768 debug1: input_session_request debug1: channel 0: new [server-session] debug2: session_new: allocate (allocated 0 max 10) debug3: session_unused: session id 0 unused debug1: session_new: session 0 debug1: session_open: channel 0 debug1: session_open: session 0: link with channel 0 debug1: server_input_channel_open: confirm session debug1: server_input_global_request: rtype [email protected] want_reply 0 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 0: LC_PAPER=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 1: LC_ADDRESS=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 2: LC_MONETARY=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 3: LC_NUMERIC=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 4: LC_TELEPHONE=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 5: LC_IDENTIFICATION=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 6: LANG="en_GB.UTF-8" debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 7: LC_MEASUREMENT=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 8: LC_TIME=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request env reply 0 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req env debug2: Setting env 9: LC_NAME=en_GB.UTF-8 debug1: server_input_channel_req: channel 0 request subsystem reply 1 debug1: session_by_channel: session 0 channel 0 debug1: session_input_channel_req: session 0 req subsystem debug2: subsystem request for sftp by user jon debug1: subsystem: exec() /usr/lib/openssh/sftp-server Starting session: subsystem 'sftp' for jon from 192.168.1.4 port 50365 debug2: fd 3 setting TCP_NODELAY debug3: packet_set_tos: set IP_TOS 0x08 debug2: fd 11 setting O_NONBLOCK debug2: fd 10 setting O_NONBLOCK debug2: fd 13 setting O_NONBLOCK debug2: channel 0: read 86 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 645 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 163 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 87 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 203 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 306 from efd 13 debug3: channel 0: discard efd debug2: channel 0: read 35 from efd 13 debug3: channel 0: discard efd --f46d04428fc2cc21f704ff373bf0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_quote">Hi,</div><div class=3D"gmail_qu= ote"><br></div><div class=3D"gmail_quote">I can get sftp to work via htc-&g= t;hts, but I can't get a shell to work. Debug below. Have I configured = something wrong, or does this look like a bug? I'm using the latest dow= nload (3.0.5).</div> <div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote">thanks,</di= v><div class=3D"gmail_quote">Jon</div><div class=3D"gmail_quote"><br></div>= <div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote"><b>Setup th= e Server side</b><br> <div dir=3D"ltr"><font face=3D"courier new, monospace"><b style=3D"backgrou= nd-color:rgb(255,255,255)"># ./hts -F <a href=3D"http://192.168.1.4:22" tar= get=3D"_blank">192.168.1.4:22</a> 2222<br></b></font><div><span style=3D"fo= nt-family:'courier new',monospace">Jul 24 23:10:19 box1 hts[22997]:= hts (httptunnel) <b>3.0.5</b> started with arguments:</span><br> </div><div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 me =3D ./hts</font></di= v><div><font face=3D"courier new, monospace" style=3D"background-color:rgb(= 255,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 device =3D (null)</fo= nt></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 port =3D 2222</font></d= iv><div><font face=3D"courier new, monospace" style=3D"background-color:rgb= (255,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 forward_port =3D 22<= /font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 forward_host =3D 192.16= 8.1.4</font></div><div><font face=3D"courier new, monospace" style=3D"backg= round-color:rgb(255,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 conte= nt_length =3D 102400</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 debug_level =3D 0</font= ></div><div><font face=3D"courier new, monospace" style=3D"background-color= :rgb(255,255,255)">Jul 24 23:10:19 box1 hts[22997]: =C2=A0 pid_filename =3D= (null)</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)"><br></font></div><div><b>Setup the Client side</b><br></div><di= v><font face=3D"courier new, monospace"><b style=3D"background-color:rgb(25= 5,255,255)"># ./htc -F 4444 <a href=3D"http://192.168.1.4:2222" target=3D"_= blank">192.168.1.4:2222</a><br> </b></font></div><div><font face=3D"courier new, monospace" style=3D"backgr= ound-color:rgb(255,255,255)"><br></font></div><div><font face=3D"courier ne= w, monospace" style=3D"background-color:rgb(255,255,255)">Jul 24 23:10:51 b= ox1 htc[23003]: htc (httptunnel) <b>3.0.5</b> started with arguments:</font= ></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 me =3D ./htc</font></di= v><div><font face=3D"courier new, monospace" style=3D"background-color:rgb(= 255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 device =3D (null)</fo= nt></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 host_name =3D 192.168.1= .4</font></div><div><font face=3D"courier new, monospace" style=3D"backgrou= nd-color:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 host_por= t =3D 2222</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 proxy_name =3D (null)</= font></div><div><font face=3D"courier new, monospace" style=3D"background-c= olor:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 proxy_port = =3D 8080</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 proxy_buffer_size =3D 0= </font></div><div><font face=3D"courier new, monospace" style=3D"background= -color:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 proxy_buff= er_timeout =3D -1</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 content_length =3D 1024= 00</font></div><div><font face=3D"courier new, monospace" style=3D"backgrou= nd-color:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 forward_= port =3D 4444</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 max_connection_age =3D = 300</font></div><div><font face=3D"courier new, monospace" style=3D"backgro= und-color:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 strict_= content_length =3D 0</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 keep_alive =3D 5</font>= </div><div><font face=3D"courier new, monospace" style=3D"background-color:= rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 proxy_authorizati= on =3D (null)</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 user_agent =3D (null)</= font></div><div><font face=3D"courier new, monospace" style=3D"background-c= olor:rgb(255,255,255)">Jul 24 23:10:51 box1 htc[23003]: =C2=A0 debug_level = =3D 0</font></div> </div><div><font face=3D"courier new, monospace" style=3D"background-color:= rgb(255,255,255)"><br></font></div><div><br class=3D""><span style=3D"font-= weight:bold;background-color:rgb(0,255,0)">Try to sftp, and it just works..= .!</span><font face=3D"courier new, monospace"><br> </font></div><div><font face=3D"courier new, monospace"><div><b>$ sftp -p44= 44=C2=A0<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected].= 4</a></b></div><div>Connected to 192.168.1.4.</div><div>sftp> pwd</div><= div><br> </div></font></div><div><b><br></b></div><div><b>Try to ssh via client port= and it <span style=3D"background-color:rgb(255,255,0)">fails</span>..</b><= br></div><div><b><span style=3D"font-family:'courier new',monospace= ">$ ssh -vvv -p4444 <a href=3D"mailto:[email protected]" target=3D"_blank">jo= [email protected]</a></span></b><br> </div><div><font face=3D"courier new, monospace"><div style=3D"background-c= olor:rgb(255,255,255)">OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014</div><div s= tyle=3D"background-color:rgb(255,255,255)">debug1: Reading configuration da= ta /home/jon/.ssh/config</div> <div style=3D"background-color:rgb(255,255,255)">debug1: /home/jon/.ssh/con= fig line 1: Applying options for *</div> <div style=3D"background-color:rgb(255,255,255)">debug1: Reading configurat= ion data /etc/ssh/ssh_config</div><div style=3D"background-color:rgb(255,25= 5,255)">debug1: /etc/ssh/ssh_config line 19: Applying options for *</div><d= iv style=3D"background-color:rgb(255,255,255)"> debug2: ssh_connect: needpriv 0</div><div style=3D"background-color:rgb(255= ,255,255)">debug1: Connecting to 192.168.1.4 [192.168.1.4] port 4444.</div> <div style=3D"background-color:rgb(255,255,255)">debug1: Connection establi= shed.</div><div style=3D"background-color:rgb(255,255,255)">debug3: Incorre= ct RSA1 identifier</div><div style=3D"background-color:rgb(255,255,255)">de= bug3: Could not load "/home/jon/.ssh/id_rsa" as a RSA1 public key= </div> <div style=3D"background-color:rgb(255,255,255)">debug1: identity file /hom= e/jon/.ssh/id_rsa type 1</div> <div style=3D"background-color:rgb(255,255,255)">debug1: identity file /hom= e/jon/.ssh/id_rsa-cert type -1</div><div style=3D"background-color:rgb(255,= 255,255)">debug1: identity file /home/jon/.ssh/id_dsa type -1</div><div sty= le=3D"background-color:rgb(255,255,255)"> debug1: identity file /home/jon/.ssh/id_dsa-cert type -1</div><div style=3D= "background-color:rgb(255,255,255)">debug1: identity file /home/jon/.ssh/id= _ecdsa type -1</div> <div style=3D"background-color:rgb(255,255,255)">debug1: identity file /hom= e/jon/.ssh/id_ecdsa-cert type -1</div><div style=3D"background-color:rgb(25= 5,255,255)">debug1: identity file /home/jon/.ssh/id_ed25519 type -1</div><d= iv style=3D"background-color:rgb(255,255,255)"> debug1: identity file /home/jon/.ssh/id_ed25519-cert type -1</div><div styl= e=3D"background-color:rgb(255,255,255)">debug1: Enabling compatibility mode= for protocol 2.0</div> <div style=3D"background-color:rgb(255,255,255)">debug1: Local version stri= ng SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</div><div><span style=3D"backgro= und-color:rgb(255,255,0)">ssh_exchange_identification: Connection closed by= remote host</span></div> <div style=3D"background-color:rgb(255,255,255);font-weight:bold"><br></div= ></font></div><div><br class=3D""><span style=3D"font-weight:bold">..server= side logs show...</span><font face=3D"courier new, monospace" style=3D"bac= kground-color:rgb(255,255,255)"><br> </font></div><div><div><font face=3D"courier new, monospace" style=3D"backg= round-color:rgb(255,255,255)">Jul 24 23:11:50 box1 htc[23003]: http_write_r= equest: write error: Invalid argument</font></div><div><font face=3D"courie= r new, monospace" style=3D"background-color:rgb(255,255,255)">Jul 24 23:11:= 50 box1 htc[23003]: couldn't open tunnel: Invalid argument</font></div> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)">Jul 24 23:11:50 box</font><span style=3D"font-family:'couri= er new',monospace">1 htc[23003]: exit with status =3D 1</span></div></d= iv> <div><font face=3D"courier new, monospace" style=3D"background-color:rgb(25= 5,255,255)"><br> </font></div><div><br></div><div><span style=3D"background-color:rgb(255,25= 5,255)"><font face=3D"courier new, monospace"><div><br></div></font>Run ssh= server in debug during above. Nothing disabled, so it seems no traffic com= es out of hts from htc. htc->hts handshake broken?..<font face=3D"courie= r new, monospace"><div> <br></div></font></span><div><font face=3D"courier new, monospace"><div sty= le=3D"background-color:rgb(255,255,255)"><b># /usr/sbin/sshd -p22 -ddd</b><= /div><div style=3D"background-color:rgb(255,255,255)">debug2: load_server_c= onfig: filename /etc/ssh/sshd_config</div> <div style=3D"background-color:rgb(255,255,255)">debug2: load_server_config= : done config len =3D 768</div><div style=3D"background-color:rgb(255,255,2= 55)">debug2: parse_server_config: config /etc/ssh/sshd_config len 768</div>= <div style=3D"background-color:rgb(255,255,255)"> debug3: /etc/ssh/sshd_config:5 setting Port 22</div><div style=3D"backgroun= d-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:12 setting ListenAdd= ress 192.168.1.4</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:13 setting Protocol 2</div><div style=3D"background-color:rgb(255,255,25= 5)">debug3: /etc/ssh/sshd_config:15 setting HostKey /etc/ssh/ssh_host_rsa_k= ey</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:16 setting HostKey /etc/ssh/ssh_host_dsa_key</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:17 setting HostKey /etc/ssh/ssh_host_ecdsa_key</div><div style=3D"backgr= ound-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:18 setting HostKe= y /etc/ssh/ssh_host_ed25519_key</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:20 setting UsePrivilegeSeparation yes</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:23 setting KeyRegenerationInterval 3600</div><div style=3D"background-co= lor:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:24 setting ServerKeyBits= 1024</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:27 setting SyslogFacility AUTH</div><div style=3D"background-color:rgb(2= 55,255,255)"> debug3: /etc/ssh/sshd_config:28 setting LogLevel INFO</div><div style=3D"ba= ckground-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:31 setting Lo= ginGraceTime 120</div><div style=3D"background-color:rgb(255,255,255)">debu= g3: /etc/ssh/sshd_config:32 setting PermitRootLogin without-password</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:33 setting StrictModes yes</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:35 setting RSAAuthentication yes</div><div style=3D"background-color:rgb= (255,255,255)">debug3: /etc/ssh/sshd_config:40 setting IgnoreRhosts yes</di= v> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:42 setting RhostsRSAAuthentication no</div><div style=3D"background-colo= r:rgb(255,255,255)"> debug3: /etc/ssh/sshd_config:44 setting HostbasedAuthentication no</div><di= v style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:= 49 setting PermitEmptyPasswords no</div><div style=3D"background-color:rgb(= 255,255,255)"> debug3: /etc/ssh/sshd_config:53 setting ChallengeResponseAuthentication no<= /div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:56 setting PasswordAuthentication yes</div><div style=3D"background-colo= r:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:69 setting X11Forwarding y= es</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:70 setting X11DisplayOffset 10</div><div style=3D"background-color:rgb(2= 55,255,255)">debug3: /etc/ssh/sshd_config:71 setting PrintMotd no</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:72 setting PrintLastLog yes</div><div style=3D"background-color:rgb(255,= 255,255)">debug3: /etc/ssh/sshd_config:73 setting TCPKeepAlive yes</div><di= v style=3D"background-color:rgb(255,255,255)"> debug3: /etc/ssh/sshd_config:80 setting AcceptEnv LANG LC_*</div><div style= =3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_config:82 sett= ing Subsystem sftp /usr/lib/openssh/sftp-server</div> <div style=3D"background-color:rgb(255,255,255)">debug3: /etc/ssh/sshd_conf= ig:93 setting UsePAM yes</div><div style=3D"background-color:rgb(255,255,25= 5)">debug1: sshd version OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014</div><div= style=3D"background-color:rgb(255,255,255)"> debug3: Incorrect RSA1 identifier</div><div style=3D"background-color:rgb(2= 55,255,255)">debug1: key_parse_private2: missing begin marker</div> <div style=3D"background-color:rgb(255,255,255)">debug1: read PEM private k= ey done: type RSA</div><div style=3D"background-color:rgb(255,255,255)">deb= ug3: Incorrect RSA1 identifier</div><div style=3D"background-color:rgb(255,= 255,255)"> debug3: Could not load "/etc/ssh/ssh_host_rsa_key" as a RSA1 publ= ic key</div><div style=3D"background-color:rgb(255,255,255)">debug1: privat= e host key: #0 type 1 RSA</div> <div style=3D"background-color:rgb(255,255,255)">debug3: Incorrect RSA1 ide= ntifier</div><div style=3D"background-color:rgb(255,255,255)">debug1: key_p= arse_private2: missing begin marker</div><div style=3D"background-color:rgb= (255,255,255)"> debug1: read PEM private key done: type DSA</div><div style=3D"background-c= olor:rgb(255,255,255)">debug3: Incorrect RSA1 identifier</div><div style=3D= "background-color:rgb(255,255,255)">debug3: Could not load "/etc/ssh/s= sh_host_dsa_key" as a RSA1 public key</div> <div style=3D"background-color:rgb(255,255,255)">debug1: private host key: = #1 type 2 DSA</div><div style=3D"background-color:rgb(255,255,255)">debug3:= Incorrect RSA1 identifier</div><div style=3D"background-color:rgb(255,255,= 255)"> debug1: key_parse_private2: missing begin marker</div><div style=3D"backgro= und-color:rgb(255,255,255)">debug1: read PEM private key done: type ECDSA</= div><div style=3D"background-color:rgb(255,255,255)">debug3: Incorrect RSA1= identifier</div> <div style=3D"background-color:rgb(255,255,255)">debug3: Could not load &qu= ot;/etc/ssh/ssh_host_ecdsa_key" as a RSA1 public key</div><div style= =3D"background-color:rgb(255,255,255)">debug1: private host key: #2 type 3 = ECDSA</div> <div style=3D"background-color:rgb(255,255,255)">debug3: Incorrect RSA1 ide= ntifier</div><div style=3D"background-color:rgb(255,255,255)">debug3: Incor= rect RSA1 identifier</div> <div style=3D"background-color:rgb(255,255,255)">debug3: Could not load &qu= ot;/etc/ssh/ssh_host_ed25519_key" as a RSA1 public key</div><div style= =3D"background-color:rgb(255,255,255)">debug1: private host key: #3 type 4 = ED25519</div> <div style=3D"background-color:rgb(255,255,255)">debug1: rexec_argv[0]=3D&#= 39;/usr/sbin/sshd'</div><div style=3D"background-color:rgb(255,255,255)= ">debug1: rexec_argv[1]=3D'-p22'</div> <div style=3D"background-color:rgb(255,255,255)">debug1: rexec_argv[2]=3D&#= 39;-ddd'</div><div style=3D"background-color:rgb(255,255,255)">debug3: = oom_adjust_setup</div><div style=3D"background-color:rgb(255,255,255)">Set = /proc/self/oom_score_adj from 0 to -1000</div> <div style=3D"background-color:rgb(255,255,255)">debug2: fd 3 setting O_NON= BLOCK</div><div style=3D"background-color:rgb(255,255,255)">debug1: Bind to= port 22 on 192.168.1.4.</div> <div style=3D"background-color:rgb(255,255,255)">Server listening on 192.16= 8.1.4 port 22.</div><div><span style=3D"background-color:rgb(255,255,0)">&l= t;don't see any activity during <b>ssh</b> attempt. Traffic not getting= out of hts tunnel?></span></div> <div style=3D"background-color:rgb(255,255,255)"><br></div><div style=3D"ba= ckground-color:rgb(255,255,255)"><br></div></font><span style=3D"background= -color:rgb(0,255,0)">...but if I use <b>sftp</b>, the handshake works fine.= ..</span></div> <div><br></div><div><br><span style=3D"background-color:rgb(255,255,255)"><= font face=3D"courier new, monospace"><div> <div>debug3: fd 4 is not O_NONBLOCK</div><div>debug1: Server will not fork = when running in debugging mode.</div><div>debug3: send_rexec_state: enterin= g fd =3D 7 config len 768</div><div>debug3: ssh_msg_send: type 0</div><div> debug3: send_rexec_state: done</div><div>debug1: rexec start in 4 out 4 new= sock 4 pipe -1 sock 7</div><div>debug1: inetd sockets after dupping: 3, 3</= div><div>Connection from 192.168.1.4 port 50365 on 192.168.1.4 port 22</div= > <div>debug1: Client protocol version 2.0; client software version OpenSSH_6= .6.1p1 Ubuntu-2ubuntu2</div><div>debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubu= ntu2 pat OpenSSH_6.6.1* compat 0x04000000</div><div>debug1: Enabling compat= ibility mode for protocol 2.0</div> <div>debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</= div><div>debug2: fd 3 setting O_NONBLOCK</div><div>debug2: Network child is= on pid 24936</div><div>debug3: preauth child monitor started</div><div> debug3: privsep user:group 119:65534 [preauth]</div><div>debug1: permanentl= y_set_uid: 119/65534 [preauth]</div><div>debug1: list_hostkey_types: ssh-rs= a,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]</div><div>debug1: SSH2_= MSG_KEXINIT sent [preauth]</div> <div>debug1: SSH2_MSG_KEXINIT received [preauth]</div><div>debug2: kex_pars= e_kexinit: <a href=3D"mailto:[email protected]" target=3D"_blank= ">[email protected]</a>,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ec= dh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-= exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preau= th]</div> <div>debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed2= 5519 [preauth]</div><div>debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,a= es256-ctr,arcfour256,arcfour128,<a href=3D"mailto:[email protected]" t= arget=3D"_blank">[email protected]</a>,<a href=3D"mailto:aes256-gcm@op= enssh.com" target=3D"_blank">[email protected]</a>,<a href=3D"mailto:c= [email protected]" target=3D"_blank">[email protected]= om</a>,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,a= rcfour,<a href=3D"mailto:[email protected]" target=3D"_blank">rij= [email protected]</a> [preauth]</div> <div>debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256= ,arcfour128,<a href=3D"mailto:[email protected]" target=3D"_blank">aes= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D= "_blank">[email protected]</a>,<a href=3D"mailto:chacha20-poly1305@ope= nssh.com" target=3D"_blank">[email protected]</a>,aes128-cbc,3d= es-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,<a href=3D"ma= ilto:[email protected]" target=3D"_blank">[email protected]= u.se</a> [preauth]</div> <div>debug2: kex_parse_kexinit: <a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha1= [email protected]" target=3D"_blank">[email protected]</a>,<a href= =3D"mailto:[email protected]" target=3D"_blank">[email protected]= om</a>,<a href=3D"mailto:[email protected]" target=3D"_blank">umac-1= [email protected]</a>,<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha= [email protected]" target=3D"_blank">[email protected]</a>,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ri= [email protected]</a>,<a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-= [email protected]" target=3D"_blank">[email protected]</a>,h= mac-md5,hmac-sha1,<a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ripemd= [email protected]</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div> <div>debug2: kex_parse_kexinit: <a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha1= [email protected]" target=3D"_blank">[email protected]</a>,<a href= =3D"mailto:[email protected]" target=3D"_blank">[email protected]= om</a>,<a href=3D"mailto:[email protected]" target=3D"_blank">umac-1= [email protected]</a>,<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha= [email protected]" target=3D"_blank">[email protected]</a>,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ri= [email protected]</a>,<a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-= [email protected]" target=3D"_blank">[email protected]</a>,h= mac-md5,hmac-sha1,<a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ripemd= [email protected]</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div> <div>debug2: kex_parse_kexinit: none,<a href=3D"mailto:[email protected]" ta= rget=3D"_blank">[email protected]</a> [preauth]</div><div>debug2: kex_parse_= kexinit: none,<a href=3D"mailto:[email protected]" target=3D"_blank">zlib@op= enssh.com</a> [preauth]</div> <div>debug2: kex_parse_kexinit: =C2=A0[preauth]</div> <div>debug2: kex_parse_kexinit: =C2=A0[preauth]</div><div>debug2: kex_parse= _kexinit: first_kex_follows 0 =C2=A0[preauth]</div><div>debug2: kex_parse_k= exinit: reserved 0 =C2=A0[preauth]</div><div>debug2: kex_parse_kexinit: <a = href=3D"mailto:[email protected]" target=3D"_blank">curve25519-s= [email protected]</a>,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp5= 21,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,= diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]</div> <div>debug2: kex_parse_kexinit: <a href=3D"mailto:ecdsa-sha2-nistp256-cert-= [email protected]" target=3D"_blank">[email protected]= </a>,<a href=3D"mailto:[email protected]" target=3D"= _blank">[email protected]</a>,<a href=3D"mailto:ecds= [email protected]" target=3D"_blank">ecdsa-sha2-nistp521= [email protected]</a>,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha= 2-nistp521,<a href=3D"mailto:[email protected]" target=3D"_b= lank">[email protected]</a>,<a href=3D"mailto:ssh-rsa-cert-v= [email protected]" target=3D"_blank">[email protected]</a>,<a href= =3D"mailto:[email protected]" target=3D"_blank">ssh-dss-cert-v01= @openssh.com</a>,<a href=3D"mailto:[email protected]" target=3D"= _blank">[email protected]</a>,<a href=3D"mailto:ssh-dss-cert-v00= @openssh.com" target=3D"_blank">[email protected]</a>,ssh-ed2551= 9,ssh-rsa,ssh-dss [preauth]</div> <div>debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256= ,arcfour128,<a href=3D"mailto:[email protected]" target=3D"_blank">aes= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D= "_blank">[email protected]</a>,<a href=3D"mailto:chacha20-poly1305@ope= nssh.com" target=3D"_blank">[email protected]</a>,aes128-cbc,3d= es-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,<a href=3D"ma= ilto:[email protected]" target=3D"_blank">[email protected]= u.se</a> [preauth]</div> <div>debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256= ,arcfour128,<a href=3D"mailto:[email protected]" target=3D"_blank">aes= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D= "_blank">[email protected]</a>,<a href=3D"mailto:chacha20-poly1305@ope= nssh.com" target=3D"_blank">[email protected]</a>,aes128-cbc,3d= es-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,<a href=3D"ma= ilto:[email protected]" target=3D"_blank">[email protected]= u.se</a> [preauth]</div> <div>debug2: kex_parse_kexinit: <a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha1= [email protected]" target=3D"_blank">[email protected]</a>,<a href= =3D"mailto:[email protected]" target=3D"_blank">[email protected]= om</a>,<a href=3D"mailto:[email protected]" target=3D"_blank">umac-1= [email protected]</a>,<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha= [email protected]" target=3D"_blank">[email protected]</a>,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ri= [email protected]</a>,<a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-= [email protected]" target=3D"_blank">[email protected]</a>,h= mac-md5,hmac-sha1,<a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ripemd= [email protected]</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div> <div>debug2: kex_parse_kexinit: <a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha1= [email protected]" target=3D"_blank">[email protected]</a>,<a href= =3D"mailto:[email protected]" target=3D"_blank">[email protected]= om</a>,<a href=3D"mailto:[email protected]" target=3D"_blank">umac-1= [email protected]</a>,<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-sha= [email protected]" target=3D"_blank">[email protected]</a>,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ri= [email protected]</a>,<a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a>,<a href=3D"mailto:hmac-= [email protected]" target=3D"_blank">[email protected]</a>,h= mac-md5,hmac-sha1,<a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a>,<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,= <a href=3D"mailto:[email protected]" target=3D"_blank">hmac-ripemd= [email protected]</a>,hmac-sha1-96,hmac-md5-96 [preauth]</div> <div>debug2: kex_parse_kexinit: none,<a href=3D"mailto:[email protected]" ta= rget=3D"_blank">[email protected]</a>,zlib [preauth]</div><div>debug2: kex_p= arse_kexinit: none,<a href=3D"mailto:[email protected]" target=3D"_blank">zl= [email protected]</a>,zlib [preauth]</div> <div>debug2: kex_parse_kexinit: =C2=A0[preauth]</div><div>debug2: kex_parse= _kexinit: =C2=A0[preauth]</div><div>debug2: kex_parse_kexinit: first_kex_fo= llows 0 =C2=A0[preauth]</div><div>debug2: kex_parse_kexinit: reserved 0 =C2= =A0[preauth]</div> <div>debug2: mac_setup: setup <a href=3D"mailto:[email protected]" t= arget=3D"_blank">[email protected]</a> [preauth]</div><div>debug1: k= ex: client->server aes128-ctr <a href=3D"mailto:[email protected]= " target=3D"_blank">[email protected]</a> none [preauth]</div> <div>debug2: mac_setup: setup <a href=3D"mailto:[email protected]" t= arget=3D"_blank">[email protected]</a> [preauth]</div><div>debug1: k= ex: server->client aes128-ctr <a href=3D"mailto:[email protected]= " target=3D"_blank">[email protected]</a> none [preauth]</div> <div>debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]</div><div>debug3: m= m_key_sign entering [preauth]</div><div>debug3: mm_request_send entering: t= ype 6 [preauth]</div><div>debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN= [preauth]</div> <div>debug3: mm_request_receive_expect entering: type 7 [preauth]</div><div= >debug3: mm_request_receive entering [preauth]</div><div>debug3: mm_request= _receive entering</div><div>debug3: monitor_read: checking request 6</div> <div>debug3: mm_answer_sign</div><div>debug3: mm_answer_sign: signature 0x7= f15480e24c0(101)</div><div>debug3: mm_request_send entering: type 7</div><d= iv>debug2: monitor_read: 6 used once, disabling now</div><div>debug2: kex_d= erive_keys [preauth]</div> <div>debug2: set_newkeys: mode 1 [preauth]</div><div>debug1: SSH2_MSG_NEWKE= YS sent [preauth]</div><div>debug1: expecting SSH2_MSG_NEWKEYS [preauth]</d= iv><div>debug2: set_newkeys: mode 0 [preauth]</div><div>debug1: SSH2_MSG_NE= WKEYS received [preauth]</div> <div>debug1: KEX done [preauth]</div><div>debug1: userauth-request for user= jon service ssh-connection method none [preauth]</div><div>debug1: attempt= 0 failures 0 [preauth]</div><div>debug3: mm_getpwnamallow entering [preaut= h]</div> <div>debug3: mm_request_send entering: type 8 [preauth]</div><div>debug3: m= m_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]</div><div>debug3: = mm_request_receive_expect entering: type 9 [preauth]</div><div>debug3: mm_r= equest_receive entering [preauth]</div> <div>debug3: mm_request_receive entering</div><div>debug3: monitor_read: ch= ecking request 8</div><div>debug3: mm_answer_pwnamallow</div><div>debug3: T= rying to reverse map address 192.168.1.4.</div><div>debug2: parse_server_co= nfig: config reprocess config len 768</div> <div>debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1</div><div>d= ebug3: mm_request_send entering: type 9</div><div>debug2: monitor_read: 8 u= sed once, disabling now</div><div>debug2: input_userauth_request: setting u= p authctxt for jon [preauth]</div> <div>debug3: mm_start_pam entering [preauth]</div><div>debug3: mm_request_s= end entering: type 100 [preauth]</div><div>debug3: mm_inform_authserv enter= ing [preauth]</div><div>debug3: mm_request_send entering: type 4 [preauth]<= /div> <div>debug2: input_userauth_request: try method none [preauth]</div><div>de= bug3: userauth_finish: failure partial=3D0 next methods=3D"publickey,p= assword" [preauth]</div><div>debug3: mm_request_receive entering</div> <div>debug3: monitor_read: checking request 100</div><div>debug1: PAM: init= ializing for "jon"</div><div>debug1: PAM: setting PAM_RHOST to &q= uot;192.168.1.4"</div><div>debug1: PAM: setting PAM_TTY to "ssh&q= uot;</div> <div>debug2: monitor_read: 100 used once, disabling now</div><div>debug3: m= m_request_receive entering</div><div>debug3: monitor_read: checking request= 4</div><div>debug3: mm_answer_authserv: service=3Dssh-connection, style=3D= , role=3D</div> <div>debug2: monitor_read: 4 used once, disabling now</div></div><div><br><= /div><div><br></div><div>...enter password on client...</div><div><br></div= ><div><br></div><div><div>debug1: userauth-request for user jon service ssh= -connection method password [preauth]</div> <div>debug1: attempt 1 failures 0 [preauth]</div><div>debug2: input_useraut= h_request: try method password [preauth]</div><div>debug3: mm_auth_password= entering [preauth]</div><div>debug3: mm_request_send entering: type 12 [pr= eauth]</div> <div>debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preaut= h]</div><div>debug3: mm_request_receive_expect entering: type 13 [preauth]<= /div><div>debug3: mm_request_receive entering [preauth]</div><div>debug3: m= m_request_receive entering</div> <div>debug3: monitor_read: checking request 12</div><div>debug3: PAM: sshpa= m_passwd_conv called with 1 messages</div><div>debug1: PAM: password authen= tication accepted for jon</div><div>debug3: mm_answer_authpassword: sending= result 1</div> <div>debug3: mm_request_send entering: type 13</div><div>debug3: mm_request= _receive_expect entering: type 102</div><div>debug3: mm_request_receive ent= ering</div><div>debug1: do_pam_account: called</div><div>debug3: PAM: do_pa= m_account pam_acct_mgmt =3D 0 (Success)</div> <div>debug3: mm_request_send entering: type 103</div><div>Accepted password= for jon from 192.168.1.4 port 50365 ssh2</div><div>debug1: monitor_child_p= reauth: jon has been authenticated by privileged process</div><div>debug3: = mm_get_keystate: Waiting for new keys</div> <div>debug3: mm_request_receive_expect entering: type 26</div><div>debug3: = mm_request_receive entering</div><div>debug3: mm_newkeys_from_blob: 0x7f154= 80fb9f0(138)</div><div>debug2: mac_setup: setup <a href=3D"mailto:hmac-md5-= [email protected]" target=3D"_blank">[email protected]</a></div> <div>debug3: mm_get_keystate: Waiting for second key</div><div>debug3: mm_n= ewkeys_from_blob: 0x7f15480fb9f0(138)</div><div>debug2: mac_setup: setup <a= href=3D"mailto:[email protected]" target=3D"_blank">hmac-md5-etm@op= enssh.com</a></div> <div>debug3: mm_get_keystate: Getting compression state</div><div>debug3: m= m_get_keystate: Getting Network I/O buffers</div><div>debug3: mm_auth_passw= ord: user authenticated [preauth]</div><div>debug3: mm_do_pam_account enter= ing [preauth]</div> <div>debug3: mm_request_send entering: type 102 [preauth]</div><div>debug3:= mm_request_receive_expect entering: type 103 [preauth]</div><div>debug3: m= m_request_receive entering [preauth]</div><div>debug3: mm_do_pam_account re= turning 1 [preauth]</div> <div>debug3: mm_send_keystate: Sending new keys: 0x7f15480e3b30 0x7f15480e4= 8f0 [preauth]</div><div>debug3: mm_newkeys_to_blob: converting 0x7f15480e3b= 30 [preauth]</div><div>debug3: mm_newkeys_to_blob: converting 0x7f15480e48f= 0 [preauth]</div> <div>debug3: mm_send_keystate: New keys have been sent [preauth]</div><div>= debug3: mm_send_keystate: Sending compression state [preauth]</div><div>deb= ug3: mm_request_send entering: type 26 [preauth]</div><div>debug3: mm_send_= keystate: Finished sending state [preauth]</div> <div>debug1: monitor_read_log: child log fd closed</div><div>debug3: mm_sha= re_sync: Share sync</div><div>debug3: mm_share_sync: Share sync end</div><d= iv>debug1: PAM: establishing credentials</div><div>debug3: PAM: opening ses= sion</div> <div>debug3: PAM: sshpam_store_conv called with 1 messages</div><div>User c= hild is on pid 24974</div><div>debug1: SELinux support disabled</div><div>d= ebug1: PAM: establishing credentials</div><div>debug1: permanently_set_uid:= 1000/1000</div> <div>debug2: set_newkeys: mode 0</div><div>debug2: set_newkeys: mode 1</div= ><div>debug1: Entering interactive session for SSH2.</div><div>debug2: fd 6= setting O_NONBLOCK</div><div>debug2: fd 8 setting O_NONBLOCK</div><div> debug1: server_init_dispatch_20</div><div>debug1: server_input_channel_open= : ctype session rchan 0 win 2097152 max 32768</div><div>debug1: input_sessi= on_request</div><div>debug1: channel 0: new [server-session]</div><div> debug2: session_new: allocate (allocated 0 max 10)</div><div>debug3: sessio= n_unused: session id 0 unused</div><div>debug1: session_new: session 0</div= ><div>debug1: session_open: channel 0</div><div>debug1: session_open: sessi= on 0: link with channel 0</div> <div>debug1: server_input_channel_open: confirm session</div><div>debug1: s= erver_input_global_request: rtype <a href=3D"mailto:no-more-sessions@openss= h.com" target=3D"_blank">[email protected]</a> want_reply 0</div= > <div>debug1: server_input_channel_req: channel 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 0: L= C_PAPER=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channel 0= request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 1: L= C_ADDRESS=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channel= 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 2: L= C_MONETARY=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channe= l 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 3: L= C_NUMERIC=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channel= 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 4: L= C_TELEPHONE=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: chann= el 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 5: L= C_IDENTIFICATION=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: = channel 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 6: L= ANG=3D"en_GB.UTF-8"</div><div>debug1: server_input_channel_req: c= hannel 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 7: L= C_MEASUREMENT=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: cha= nnel 0 request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 8: L= C_TIME=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channel 0 = request env reply 0</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req env</div><div>debug2: Setting env 9: L= C_NAME=3Den_GB.UTF-8</div><div>debug1: server_input_channel_req: channel 0 = request subsystem reply 1</div> <div>debug1: session_by_channel: session 0 channel 0</div><div>debug1: sess= ion_input_channel_req: session 0 req subsystem</div><div>debug2: subsystem = request for sftp by user jon</div><div>debug1: subsystem: exec() /usr/lib/o= penssh/sftp-server</div> <div>Starting session: subsystem 'sftp' for jon from 192.168.1.4 po= rt 50365</div><div>debug2: fd 3 setting TCP_NODELAY</div><div>debug3: packe= t_set_tos: set IP_TOS 0x08</div><div>debug2: fd 11 setting O_NONBLOCK</div> <div>debug2: fd 10 setting O_NONBLOCK</div><div>debug2: fd 13 setting O_NON= BLOCK</div><div>debug2: channel 0: read 86 from efd 13</div><div>debug3: ch= annel 0: discard efd</div><div>debug2: channel 0: read 645 from efd 13</div= > <div>debug3: channel 0: discard efd</div><div>debug2: channel 0: read 163 f= rom efd 13</div><div>debug3: channel 0: discard efd</div><div>debug2: chann= el 0: read 87 from efd 13</div><div>debug3: channel 0: discard efd</div> <div>debug2: channel 0: read 203 from efd 13</div><div>debug3: channel 0: d= iscard efd</div><div>debug2: channel 0: read 306 from efd 13</div><div>debu= g3: channel 0: discard efd</div><div>debug2: channel 0: read 35 from efd 13= </div> <div>debug3: channel 0: discard efd</div></div><div><br></div><div><br></di= v><div><br></div></font></span></div></div></div></div></div> --f46d04428fc2cc21f704ff373bf0-- --===============4288908618550872218== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ bug-httptunnel mailing list [email protected] https://lists.gnu.org/mailman/listinfo/bug-httptunnel --===============4288908618550872218==--