View previous topic :: View next topic |
Author |
Message |
BillyBob-SA1 n00b
Joined: 17 Nov 2004 Posts: 53
|
Posted: Mon Jul 09, 2007 10:49 pm Post subject: sshd error: channel 0: chan_read_failed for istate 3 |
|
|
Hi there folks,
Ever since I emerged the ssh update last Saturday (July 9), I have been getting these errors on my Netra T105's and an E220 from scp'ing file over to them. They have never been present before.
secure:Jul 9 16:02:21 web2 sshd[13693]: error: channel 0: chan_read_failed for istate 3
Files are copied ok and md5 sums check good between boxes.
Here is my emerge --info
Any thoughts will be appreciated.
Portage 2.1.2.9 (default-linux/sparc/sparc64/2006.1, gcc-3.3.5-20050130, glibc-2.3.6-r5, 2.6.15-gentoo-r1-Production-1 sparc64)
=================================================================
System uname: 2.6.15-gentoo-r1-Production-1 sparc64 sun4u
Gentoo Base System release 1.12.9
Timestamp of tree: Mon, 09 Jul 2007 08:50:01 +0000
dev-lang/python: 2.3.5-r3, 2.4.4-r4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox: 1.2.17
sys-devel/autoconf: 2.13, 2.61
sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils: 2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool: 1.5.23b
virtual/os-headers: 2.6.19.2-r2
ACCEPT_KEYWORDS="sparc"
AUTOCLEAN="yes"
CBUILD="sparc-unknown-linux-gnu"
CFLAGS="-O2 -mcpu=ultrasparc"
CHOST="sparc-unknown-linux-gnu"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -mcpu=ultrasparc"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://mirror.datapipe.net/gentoo http://gentoo.osuosl.org/ ftp://mirrors.tds.net/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://sync.oneeighty.com/gentoo-portage"
USE="apache2 berkdb caps clearpasswd cli cracklib crypt dri eds emboss encode foomaticdb fortran gcc64 gdbm gif gstreamer gtk2 iconv imlib isdnlog jpeg libwww mad mbox midi mikmod motif mpeg mudflap ncurses nls nptl nptlonly ogg openmp pam pcre perl png pppd python qt3 readline reflection session sparc spell spl tcpd userlocales vorbis xinetd xml xorg zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="dummy fbdev glint mach64 mga r128 radeon sunbw2 suncg14 suncg3 suncg6 sunffb sunleo tdfx v4l voodoo"
Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY _________________ -------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA |
|
Back to top |
|
|
erik258 Advocate
Joined: 12 Apr 2005 Posts: 2650 Location: Twin Cities, Minnesota, USA
|
Posted: Mon Jul 09, 2007 10:54 pm Post subject: |
|
|
Have you tried restarting your sshd daemon to make sure changes to the software go into effect?
Did you etc-update? Did you push through changes to sshd_config? If so, it might be worth revisiting that file. _________________ Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit! |
|
Back to top |
|
|
BillyBob-SA1 n00b
Joined: 17 Nov 2004 Posts: 53
|
Posted: Mon Jul 09, 2007 11:02 pm Post subject: |
|
|
Yuppers to all of the above. Been at this a few years <G> One thing I did for get was my version of ssh & open_ssl.
This was just released last week:
net-misc/openssh-4.6_p1-r2
And this has been around awhile:
dev-libs/openssl-0.9.8d
Since there is no real issue with the files transfered, I am not going to revert.
I came off:
net-misc/openssh-4.5_p1-r1
<G> _________________ -------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA |
|
Back to top |
|
|
erik258 Advocate
Joined: 12 Apr 2005 Posts: 2650 Location: Twin Cities, Minnesota, USA
|
Posted: Tue Jul 10, 2007 3:16 am Post subject: |
|
|
Code: | Been at this a few years <G> |
In that case I don't think any of my guesses are going to help you. My computers are all at 4.5_p1-r1 and happy. _________________ Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit! |
|
Back to top |
|
|
BillyBob-SA1 n00b
Joined: 17 Nov 2004 Posts: 53
|
Posted: Tue Jul 10, 2007 3:45 am Post subject: |
|
|
Mine were happy at that too... Oh well, I'm sure I won't be the only one wondering. All my Sun's are doing the same thing.
Have a good evening... _________________ -------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA |
|
Back to top |
|
|
starrbuck Tux's lil' helper
Joined: 04 Apr 2005 Posts: 139 Location: North Texas
|
Posted: Tue Jul 10, 2007 7:33 pm Post subject: |
|
|
BillyBob-SA1 wrote: | This was just released last week:
net-misc/openssh-4.6_p1-r2
|
I had to mask this new version and go back to the older one on my Ultra 1 due to a compile error. The build error told me that ldap wasn't supported and recommended that I mask it and try again in the future.
/shrug |
|
Back to top |
|
|
BillyBob-SA1 n00b
Joined: 17 Nov 2004 Posts: 53
|
Posted: Tue Jul 10, 2007 7:52 pm Post subject: |
|
|
Kinda figured there were other issues
I just threw this up as info for the developers. They are usually pretty quick in the Sparc fourm to notice this stuff. I suppose I should file a bug report instead...
P.S There is a similar bug open for net-misc/openssh-4.6_p1-r1 although I never had an issue with it.
https://bugs.gentoo.org/show_bug.cgi?id=181407
I'll just leave it be for awhile _________________ -------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA |
|
Back to top |
|
|
Philippe23 Tux's lil' helper
Joined: 20 Dec 2006 Posts: 130 Location: Central NY
|
Posted: Fri Aug 03, 2007 12:57 pm Post subject: |
|
|
I just noticed this in my logs last night too. (I did a scp to the machine.)
I'm running an x86 (Core 2 Duo) Quote: | Aug 2 18:30:59 hobbes sshd(pam_unix)[20597]: session opened for user peep by (uid=0)
Aug 2 18:30:59 hobbes sshd[20597]: subsystem request for sftp
Aug 2 18:43:43 hobbes sshd[20597]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:43:43 hobbes sshd[20597]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:43:43 hobbes sshd(pam_unix)[20597]: session closed for user peep
Aug 2 18:49:10 hobbes sshd(pam_unix)[20666]: session opened for user peep by (uid=0)
Aug 2 18:49:10 hobbes sshd[20666]: subsystem request for sftp
Aug 2 18:49:12 hobbes sshd[20666]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:12 hobbes sshd[20666]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:12 hobbes sshd(pam_unix)[20666]: session closed for user peep
Aug 2 18:49:36 hobbes sshd[20668]: Accepted keyboard-interactive/pam for peep from 216.144.251.47 port 50365 ssh2
Aug 2 18:49:36 hobbes sshd(pam_unix)[20677]: session opened for user peep by (uid=0)
Aug 2 18:49:36 hobbes sshd[20677]: subsystem request for sftp
Aug 2 18:49:39 hobbes sshd[20677]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:39 hobbes sshd[20677]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:39 hobbes sshd(pam_unix)[20677]: session closed for user peep
Aug 2 18:49:42 hobbes sshd(pam_unix)[20526]: session closed for user peep | I tried to color code the pid lines up there for easier reading....
Emerge --info: Code: | Portage 2.1.2.11 (default-linux/x86/2006.1/server, gcc-4.1.2, glibc-2.5-r4, 2.6.17-gentoo-r8 i686)
=================================================================
System uname: 2.6.17-gentoo-r8 i686 Genuine Intel(R) CPU T2400 @ 1.83GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Fri, 03 Aug 2007 12:20:01 +0000
dev-lang/python: 2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
sys-apps/sandbox: 1.2.17
sys-devel/autoconf: 2.13, 2.61
sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils: 2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool: 1.5.23b
virtual/os-headers: 2.6.21
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -msse3 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache2-php4/ext-active/ /etc/php/cgi-php4/ext-active/ /etc/php/cli-php4/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=pentium-m -msse3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages metadata-transfer sandbox sfperms strict userfetch userpriv usersandbox"
GENTOO_MIRRORS=" ftp://gentoo.chem.wisc.edu/gentoo/ http://open-systems.ufl.edt/mirrors/gentoo "
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/overlays/g-cpan"
SYNC="rsync://rsync.us.gentoo.org/gentoo-portage"
USE="acpi apache2 authdaemond bash-completion berkdb bitmap-fonts bzip2 clearpasswd cli cracklib crypt dcc doc dri gd gpm iconv imap isdnlog javascript libg++ logrotate maildir mailwrapper midi mime mmx mudflap mysql ncurses nfs nptl nptlonly openmp pam pcre pear perl perlsuid php pni postfix ppds pppd python pyzor pyzord razor readline reflection sasl session spf spl sse sse2 sse3 ssl tcpd tools truetype truetype-fonts type1-fonts vda vhosts x86 xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i740 i810 imstt mach64 mga neomagic nsc nv r128 radeon rendition s3 s3virge savage siliconmotion sis sisusb tdfx tga trident tseng v4l vesa vga via vmware voodoo"
Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS | OpenSSH & OpenSSL Versions:
- net-misc/openssh-4.6_p1-r2
- dev-libs/openssl-0.9.8d
Everything went fine for me as well, but I found this bug while trying to figure out what those warnings were, so I figured I'd post here.
I'm also sticking a "me too" on Bug #181407.[/url] |
|
Back to top |
|
|
hanj Veteran
Joined: 19 Aug 2003 Posts: 1500
|
Posted: Fri Aug 03, 2007 4:14 pm Post subject: |
|
|
Yep... I'm seeing these too since openssh update this morning.
hanji _________________ Server Admin Blog - Uno-Code.com |
|
Back to top |
|
|
hanj Veteran
Joined: 19 Aug 2003 Posts: 1500
|
Posted: Tue Aug 07, 2007 1:36 pm Post subject: |
|
|
Looks like this is fixed now. You'll need to add ~x86 to get the latest version with the fix.
portage/package.keywords:
Code: | =net-misc/openssh-4.6_p1-r4 ~x86 |
Here is the changelog:
Code: | *openssh-4.6_p1-r4 (06 Aug 2007)
06 Aug 2007; Mike Frysinger <vapier@gentoo.org>
+files/openssh-4.6_p1-chan-read-failed.patch, +openssh-4.6_p1-r4.ebuild:
Fix from upstream for spurious chan_read_failed errors #181407. |
hanji _________________ Server Admin Blog - Uno-Code.com |
|
Back to top |
|
|
trojahn n00b
Joined: 29 Jun 2006 Posts: 8
|
Posted: Wed Aug 08, 2007 12:42 pm Post subject: |
|
|
Well, installing the new version did fixed the errors but the accounts that used to login using rbash now can't... Changing them to bash make them work but, obviously, they use rbash for a reason
Ideas? |
|
Back to top |
|
|
trojahn n00b
Joined: 29 Jun 2006 Posts: 8
|
Posted: Wed Aug 08, 2007 12:53 pm Post subject: |
|
|
trojahn wrote: | Well, installing the new version did fixed the errors but the accounts that used to login using rbash now can't... Changing them to bash make them work but, obviously, they use rbash for a reason
Ideas? |
Nevermind... It worked again changing /etc/pam.d/sshd from this:
Code: |
auth required pam_shells.so
auth required pam_nologin.so
auth include system-auth
account include system-auth
password include system-auth
session include system-auth
|
to this:
Code: |
auth include system-auth
auth required pam_shells.so
auth required pam_nologin.so
account include system-auth
password include system-auth
session include system-auth
|
I remembered I had to update this file last emerge I did... Not sure though about the problems I may have changing that file... |
|
Back to top |
|
|
tredman2 Apprentice
Joined: 06 Dec 2002 Posts: 169 Location: Holiday, FL
|
Posted: Thu Aug 09, 2007 7:39 pm Post subject: SSH Issues |
|
|
According to a bug on the OpenSSH tracker (https://bugzilla.mindrot.org/show_bug.cgi?id=1306), this was fixed in 4.7p1. There was a ancient HUP bug that was being fixed (I was seeing it about 25% of the time), and the fix for that created the spurious error messages, particularly on scp operations, it seems. There was some talk about backing out the patch that caused this problem, but it seems they were able to fix the spurious errors without reintroducing the HUP regression. 4.6p1-r4 (Bug 181407) seems to backport the fix to 4.6, so that should work until 4.7 makes its way into the tree. _________________ Tim
"I drank what?" - Socrates, 399 BCE |
|
Back to top |
|
|
ashak n00b
Joined: 19 Mar 2003 Posts: 11
|
Posted: Thu Jul 17, 2008 1:44 pm Post subject: |
|
|
If anyone comes across this post searching for 'not being able to login with rbash via ssh' like I did, then what trojahn suggests above above changing the order of /etc/pam.d/sshd is incorrect. The reason rbash doesn't work because the first line in /etc/pam.d/sshd:
auth required pam_shells.so
Checks for a 'valid shell' and some other things. Essentially that the users shell is listed in /etc/shells. Adding rbash to this file allows users to login that have rbash set as their shell. Without having to reorder the correctly ordered default pam sshd file. |
|
Back to top |
|
|
natros n00b
Joined: 26 Sep 2003 Posts: 70
|
Posted: Sat Aug 09, 2008 10:39 am Post subject: |
|
|
Thank you,
you saved my day.
I was unable to login because my /etc/shells was empty. _________________ -=[abit ip35 pro core2quad q6600 (oc 3.0 ghz) 8 gb ram 2x320 raid0 ext4 xfx8800gt 512mb]=- |
|
Back to top |
|
|
|