Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Mar 2001 14:20:24 +0000
From:      Mark Drayton <mark.drayton@4thwave.co.uk>
To:        freebsd-questions@freebsd.org
Subject:   sshd core dumps with unknown user
Message-ID:  <20010315142024.A25774@tethys.valhalla.net>

next in thread | raw e-mail | index | archive | help
Hi

FreeBSD type49.com 4.2-STABLE FreeBSD 4.2-STABLE #0: Tue Feb 13 13:43:54
GMT 2001     root@type49.com:/usr/obj/usr/src/sys/GENERIC  i386

I'm having a problem with sshd core dumping when an unknown user tries
to log in. Here's the output from ssh -d when I try to log in as an
invalid user (test):

debug1: sshd version OpenSSH_2.3.0
debug1: read DSA private key done
debug1: Bind to port 22 on ::.
Server listening on :: port 22.
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
Generating 768 bit RSA key.
RSA key generation complete.
debug1: Server will not fork when running in debugging mode.
Connection from tethys.valhalla.net port 1018
Connection from 195.26.32.112 port 1018
debug1: Client protocol version 2.0; client software version
OpenSSH_2.3.0p1
debug1: match: OpenSSH_2.3.0p1 pat ^OpenSSH[-_]2\.3
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-1.99-OpenSSH_2.3.0
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug1: got kexinit: ssh-dss
debug1: got kexinit:
3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@lysator.liu.se
debug1: got kexinit:
3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@lysator.liu.se
debug1: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160@openssh.com
debug1: got kexinit: hmac-sha1,hmac-md5,hmac-ripemd160@openssh.com
debug1: got kexinit: none
debug1: got kexinit: none
debug1: got kexinit: 
debug1: got kexinit: 
debug1: first kex follow: 0 
debug1: reserved: 0 
debug1: done
debug1: kex: client->server 3des-cbc hmac-sha1 none
debug1: kex: server->client 3des-cbc hmac-sha1 none
debug1: Wait SSH2_MSG_KEX_DH_GEX_REQUEST.
/etc/ssh/primes: No such file or directory
WARNING: /etc/ssh/primes does not exist, using old prime
debug1: bits set: 510/1024
debug1: Sending SSH2_MSG_KEX_DH_GEX_GROUP.
debug1: Wait SSH2_MSG_KEX_DH_GEX_INIT.
debug1: bits set: 536/1024
debug1: sig size 20 20
debug1: send SSH2_MSG_NEWKEYS.
debug1: done: send SSH2_MSG_NEWKEYS.
debug1: Wait SSH2_MSG_NEWKEYS.
debug1: GOT SSH2_MSG_NEWKEYS.
debug1: done: KEX2.
debug1: userauth-request for user test service ssh-connection method
none
debug1: attempt #1
input_userauth_request: illegal user test

/var/log/messages:

Mar 15 14:06:59 type49 /kernel: pid 16494 (sshd), uid 0: exited on
signal 11 (core dumped)

I don't know if this is a PAM related issue - I let mergemaster replace
/etc/pam.conf when I noticed the PAM changes in UPDATING had been
integrated.

On another note, where do I get an /etc/ssh/primes file from? I've
looked around on usenet/mailing lists but I can't find anything about
this file and FreeBSD (only Linux).

Thanks for any help,

-- 

Mark Drayton
4th Wave Technologies
01794 504040

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010315142024.A25774>