[fixed] ssh 127.0.0.1 won't work

swagr · Last edited by swagr on Fri Apr 23, 2004 10:12 pm; edited 1 time in total

I need to ssh my local machine to do some troubleshooting.
I realize ssh-ing the machine I'm on is a little pointeless otherwise.

Remote machines can ssh the box with no problems, but when I try to do a local ssh (ssh 127.0.0.1) it won't work.

Does it sound I have something misconfigured or does ssh actually do this on purpose?

Thanks for any help.
_________________
RUN!

sekretarz · Posted: Fri Apr 23, 2004 6:41 pm Post subject:

I can normally ssh localhost. Check two files: /etc/hosts.allow and /etc/hosts.deny
_________________
#gentoo.pl Team - sekretarz

vonhelmet · Posted: Fri Apr 23, 2004 7:05 pm Post subject:

phthalocyanide

Do you have any netfiltering rules?

do this with root privilege:

/sbin/iptables -L

If you have not set any rules, you should get output like this:

Password:
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

swagr · Posted: Fri Apr 23, 2004 7:53 pm Post subject:

No iptables rules. No hosts.allow/deny files in etc.

If I ssh verbosely I see that I actually physically connect, but sshd boots me off.

NeddySeagoon · Posted: Fri Apr 23, 2004 8:03 pm Post subject:

swagr,

You may have rootsquash set. ssh in as an unprivilidged user and do su after if needed.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

swagr · Posted: Fri Apr 23, 2004 8:20 pm Post subject:

This is really odd.
I set up a proxy on another machine that just bounces me straight back.

When I ssh myself that way it works!?

So the stuff going OVER the wire is the same. The only issue here is IP address. It's just that sshd doesn't like it coming from the same machine. So the question is still: why does sshd have a problem?
_________________
RUN!

swagr · Posted: Fri Apr 23, 2004 10:11 pm Post subject:

FIXED!

Ok as it turns out, sshd was being started from xinetd.
I thought it was started from /etc/init.d/sshd because I'd always see sshd jobs in ps. I figured xinet.d would start/stop sshd as needed. I guess I was wrong.

Anyway, my xinetd.conf specifies the only_from parameter as the network address I'm on but not explicitly localhost or 127.0.0.1.

When I added localhost to the only_from field in xinetd.conf, everything worked fine.

I guess xinetd passes some command-line parameters to ssh that make it boot me off unless it explicitly sees an address allowed in xinetd.conf.
_________________
RUN!