* 3.0.7: Possible sshd bug when running as a service and public key offered
@ 2019-12-05 11:19 Christopher Mapes
0 siblings, 0 replies; 2+ messages in thread
From: Christopher Mapes @ 2019-12-05 11:19 UTC (permalink / raw)
To: cygwin
[-- Attachment #1: Type: text/plain, Size: 4787 bytes --]
I sent a two-part emails about this, but somehow only the second one went through. Apologies; The second part doesn't make much sense by itself. Following are both parts merged into one along with some edits for clarification.
~
I've found an interesting issue with sshd when running as a service and a any key is offered by the ssh client. Right after the key is offered, sshd immediately closes the connection. This happens whether the corresponding key is installed on the server-side in authorized_keys or not, which is strange. In other words, even if the offered key is not used, sshd still immediately closes the connection, and the user is not prompted for a password to spite the fact that authentications that can continue are password and keyboard-interactive.
If there is no key offered (I tested by renaming .ssh/id_rsa to .ssh/_id_rsa temporarily on the client), or if the sshd process on the server is started from the console rather than a service, it continues on to prompt for a password which is the correct behavior.
I'm pretty sure this issue is new to cygwin 3.x. We've been using cygwin 2.x in our environment for years without issue. This is the first time we're using 3.x, and the first time we've had this issue. 3.x does run the service as LocalSystem (SYSTEM) by default, so I went with that. Previous 2.x installs we had run it under cyg_server.
Of course, it could be something in our environment, for example these servers are in one domain, but the users logging in are in a different trusted domain. They are running 2016 whereas the previous servers were running 2003, 2008 or 2012. There may be some group policy rule causing an issue. Windows Defender could be causing problems, but I'm pretty sure it isn't because I have added the cygwin directory to the exclusion list. It does happen on every server I installed cygwin 3.x on (3 of them so far).
A full log of the failure from the client side is attached as sshd-client-fail-example.log. Here is a snippet:
...
debug1: Trying private key: /root/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug3: sign_and_send_pubkey
debug2: we sent a publickey packet, wait for reply
Connection closed by 1.2.3.4
I tried to get a debug log of the failure from the server side by running sshd with the -D -ddd option interactively, but doing this makes the issue go away. I was able to get the debug log by modifying the service parameters from just "-D" to "-D -ddd" in the registry then restarting the service. When I do that, the issue still occurs. Here is a snippet of the server-side log:
...
debug2: input_userauth_request: try method publickey [preauth]
debug2: userauth_pubkey: valid user user-xx attempting public key ssh-rsa rsa-data-xx [preauth]
debug3: userauth_pubkey: have ssh-rsa signature for RSA SHA256:sha-data-xx [preauth]
debug3: mm_key_allowed entering [preauth]
debug3: mm_request_send entering: type 22 [preauth]
debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
debug3: mm_request_receive_expect entering: type 23 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 22
debug3: mm_answer_keyallowed entering
debug3: mm_answer_keyallowed: key_from_blob: 0x60008fcf0
debug1: temporarily_use_uid: 1074753138/1073742337 (e=18/18)
seteuid 1074753138: No such device or address
debug1: do_cleanup
debug1: Killing privsep child 302
Based on some info I read on the cygwin site, I figured from the "seteuid: * No such device or address" error that it was probably trying to do an LSA lookup for my account and somehow bombing out when it could not find it. So, stored my password in LSA with passwd -R, and voila -- it works: The offered certificate is gracefully rejected, and ssh continues on to prompt me for my password. A full log from the client side of this success is attached as sshd-client-success-example.log. Here is a snippet:
...
debug1: Trying private key: /root/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug3: sign_and_send_pubkey
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password,keyboard-interactive
...
debug3: remaining preferred:
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
user-xx@fqdn-xx's password:
Storing the obfuscated password in the LSA presents security issues as this server is shared by a lot of users and accessible from a fairly large network, so it is not a viable work-around.
cygcheck.out also attached. I've and changed all the ips and host/user/domain names in the files for security purposes.
If you need any further details, let me know.
[-- Attachment #2: cygcheck.out --]
[-- Type: application/octet-stream, Size: 26275 bytes --]
Cygwin Configuration Diagnostics
Current System Time: Tue Dec 03 11:47:53 2019
Windows 2016 Server Standard Ver 10.0 Build 14393
Running in Terminal Service session
Path: D:\LocalWork\cygwin\usr\local\bin
D:\LocalWork\cygwin\bin
D:\Python\3.8.0\Scripts
D:\Python\3.8.0
C:\Program Files (x86)\Common Files\Oracle\Java\javapath
C:\Windows\system32
C:\Windows
C:\Windows\System32\Wbem
C:\Windows\System32\WindowsPowerShell\v1.0
D:\Program Files\Putty
D:\Strawberry\c\bin
D:\Strawberry\perl\site\bin
D:\Strawberry\perl\bin
D:\Program Files\Microsoft VS Code\bin
C:\Program Files (x86)\Microsoft SQL Server\150\DTS\Binn
D:\Program Files\Git\cmd
C:\Users\user-xx.DOMAIN-XX\AppData\Local\Microsoft\WindowsApps
Output from D:\LocalWork\cygwin\bin\id.exe
UID: 1074753138(user-xx) GID: 1073742337(Domain Users)
1073742337(Domain Users) 544(Administrators)
SysDir: C:\Windows\system32
WinDir: C:\Windows
USER = 'user-xx'
PWD = '/home/user-xx'
HOME = '/home/user-xx'
USERDOMAIN = 'DOMAIN-XX'
OS = 'Windows_NT'
COMMONPROGRAMFILES = 'C:\Program Files\Common Files'
PROCESSOR_LEVEL = '6'
PSModulePath = 'C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules'
CommonProgramW6432 = 'C:\Program Files\Common Files'
CommonProgramFiles(x86) = 'C:\Program Files (x86)\Common Files'
LANG = 'en_US.UTF-8'
TZ = 'America/New_York'
HOSTNAME = 'hostname-xx'
PUBLIC = 'C:\Users\Public'
OLDPWD = '/home/user-xx'
USERNAME = 'user-xx'
LOGONSERVER = '\\DOMAINSVR-xx'
PROCESSOR_ARCHITECTURE = 'AMD64'
copycmd = '/y'
LOCALAPPDATA = 'C:\Users\user-xx.DOMAIN-XX\AppData\Local'
COMPUTERNAME = 'HOSTNAME-xx'
SYSTEMDRIVE = 'C:'
USERPROFILE = 'C:\Users\user-xx.DOMAIN-XX'
PATHEXT = '.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PY;.PYW'
SYSTEMROOT = 'C:\Windows'
USERDOMAIN_ROAMINGPROFILE = 'DOMAIN-XX'
PROCESSOR_IDENTIFIER = 'Intel64 Family 6 Model 85 Stepping 4, GenuineIntel'
TMP = '/tmp'
PROCESSOR_REVISION = '5504'
PROFILEREAD = 'true'
USERDNSDOMAIN = 'DOMAIN-XX.AD.VZWCORP.COM'
PROMPT = '$m$_$p$g'
NUMBER_OF_PROCESSORS = '2'
ProgramW6432 = 'C:\Program Files'
COMSPEC = 'C:\Windows\system32\cmd.exe'
APPDATA = 'C:\Users\user-xx.DOMAIN-XX\AppData\Roaming'
CIS = 'enabled'
SHELL = '/bin/bash'
TERM = 'xterm'
WINDIR = 'C:\Windows'
ProgramData = 'C:\ProgramData'
SHLVL = '1'
MINTTY_SHORTCUT = '/cygdrive/d/LocalWork/ISA_Tools/Terminals/Cygwin (Admin).lnk'
PRINTER = 'Microsoft Print to PDF'
PROGRAMFILES = 'C:\Program Files'
ALLUSERSPROFILE = 'C:\ProgramData'
TEMP = '/tmp'
ProgramFiles(x86) = 'C:\Program Files (x86)'
__COMPAT_LAYER = 'Installer'
PS1 = '\[\e]0;\w\a\]\n\[\e[32m\]\u@\h \[\e[33m\]\w\[\e[0m\]\n\$ '
HOMEDRIVE = 'C:'
INFOPATH = '/usr/local/info:/usr/share/info:/usr/info'
HOMEPATH = '\Users\user-xx.DOMAIN-XX'
dircmd = '/o:gne'
ORIGINAL_PATH = '/cygdrive/d/Python/3.8.0/Scripts:/cygdrive/d/Python/3.8.0:/cygdrive/c/Program Files (x86)/Common Files/Oracle/Java/javapath:/cygdrive/c/Windows/system32:/cygdrive/c/Windows:/cygdrive/c/Windows/System32/Wbem:/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0:/cygdrive/d/Program Files/Putty:/cygdrive/d/Strawberry/c/bin:/cygdrive/d/Strawberry/perl/site/bin:/cygdrive/d/Strawberry/perl/bin:/cygdrive/d/Program Files/Microsoft VS Code/bin:/cygdrive/c/Program Files (x86)/Microsoft SQL Server/150/DTS/Binn:/cygdrive/d/Program Files/Git/cmd:/cygdrive/c/Users/user-xx.DOMAIN-XX/AppData/Local/Microsoft/WindowsApps'
EXECIGNORE = '*.dll'
_ = '/usr/bin/cygcheck'
HKEY_CURRENT_USER\SOFTWARE\Cygwin
HKEY_CURRENT_USER\SOFTWARE\Cygwin\Installations
(default) = '\??\D:\LocalWork\cygwin'
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\Installations
(default) = '\??\D:\LocalWork\cygwin'
HKEY_LOCAL_MACHINE\SOFTWARE\Cygwin\setup
(default) = 'D:\LocalWork\cygwin'
obcaseinsensitive set to 1
Cygwin installations found in the registry:
System: Key: 10f531c27f22e3dc Path: D:\LocalWork\cygwin
User: Key: 10f531c27f22e3dc Path: D:\LocalWork\cygwin
a: fd N/A N/A
b: cd N/A N/A
c: hd NTFS 71112Mb 34% CP CS UN PA FC QU System
d: hd NTFS 255997Mb 8% CP CS UN PA FC QU App
D:\LocalWork\cygwin / system binary,auto
D:\LocalWork\cygwin\bin /usr/bin system binary,auto
D:\LocalWork\cygwin\lib /usr/lib system binary,auto
cygdrive prefix /cygdrive user binary,posix=0,auto
Found: D:\LocalWork\cygwin\bin\awk
-> D:\LocalWork\cygwin\bin\gawk.exe
Found: D:\LocalWork\cygwin\bin\bash.exe
Found: D:\LocalWork\cygwin\bin\cat.exe
Found: D:\LocalWork\cygwin\bin\cp.exe
Found: D:\Strawberry\c\bin\cpp.exe
Not Found: crontab
Found: D:\LocalWork\cygwin\bin\find.exe
Found: C:\Windows\system32\find.exe
Warning: D:\LocalWork\cygwin\bin\find.exe hides C:\Windows\system32\find.exe
Found: D:\Strawberry\c\bin\gcc.exe
Found: D:\Strawberry\c\bin\gdb.exe
Found: D:\LocalWork\cygwin\bin\grep.exe
Found: D:\LocalWork\cygwin\bin\kill.exe
Found: D:\Strawberry\c\bin\ld.exe
Found: D:\LocalWork\cygwin\bin\ls.exe
Not Found: make
Found: D:\LocalWork\cygwin\bin\mv.exe
Found: D:\Strawberry\c\bin\patch.exe
Found: D:\LocalWork\cygwin\bin\perl.exe
Found: D:\Strawberry\perl\bin\perl.exe
Warning: D:\LocalWork\cygwin\bin\perl.exe hides D:\Strawberry\perl\bin\perl.exe
Found: D:\LocalWork\cygwin\bin\rm.exe
Found: D:\LocalWork\cygwin\bin\sed.exe
Found: D:\LocalWork\cygwin\bin\ssh.exe
Found: D:\LocalWork\cygwin\bin\sh.exe
Found: D:\LocalWork\cygwin\bin\tar.exe
Found: D:\LocalWork\cygwin\bin\test.exe
Found: D:\LocalWork\cygwin\bin\vi.exe
Found: D:\LocalWork\cygwin\bin\vim.exe
39k 2016/09/19 D:\LocalWork\cygwin\bin\cygargp-0.dll - os=4.0 img=0.0 sys=5.2
"cygargp-0.dll" v0.0 ts=2016-09-19 02:13
19k 2018/12/20 D:\LocalWork\cygwin\bin\cygattr-1.dll - os=4.0 img=0.0 sys=5.2
"cygattr-1.dll" v0.0 ts=2018-12-20 09:48
246k 2019/03/05 D:\LocalWork\cygwin\bin\cygblkid-1.dll - os=4.0 img=0.0 sys=5.2
"cygblkid-1.dll" v0.0 ts=2019-03-05 20:06
66k 2019/07/21 D:\LocalWork\cygwin\bin\cygbz2-1.dll - os=4.0 img=0.0 sys=5.2
"cygbz2-1.dll" v0.0 ts=2019-07-22 00:05
13k 2019/01/02 D:\LocalWork\cygwin\bin\cygcom_err-2.dll - os=4.0 img=0.0 sys=5.2
"cygcom_err-2.dll" v0.0 ts=2019-01-02 02:39
39k 2017/09/03 D:\LocalWork\cygwin\bin\cygcrypt-0.dll - os=4.0 img=0.0 sys=5.2
"cygcrypt-0.dll" v0.0 ts=2017-09-03 08:18
194k 2019/04/03 D:\LocalWork\cygwin\bin\cygcrypt-2.dll - os=4.0 img=0.0 sys=5.2
"cygcrypt-2.dll" v0.0 ts=2019-04-03 22:05
2416k 2019/09/13 D:\LocalWork\cygwin\bin\cygcrypto-1.1.dll - os=4.0 img=0.0 sys=5.2
"cygcrypto-1.1.dll" v0.0 ts=2019-09-13 18:36
1552k 2017/09/28 D:\LocalWork\cygwin\bin\cygdb-5.3.dll - os=4.0 img=0.0 sys=5.2
"cygdb-5.3.dll" v0.0 ts=2017-09-28 20:05
119k 2017/09/28 D:\LocalWork\cygwin\bin\cygdb_cxx-5.3.dll - os=4.0 img=0.0 sys=5.2
"cygdb_cxx-5.3.dll" v0.0 ts=2017-09-28 20:06
569k 2017/09/28 D:\LocalWork\cygwin\bin\cygdb_sql-5.3.dll - os=4.0 img=0.0 sys=5.2
"cygdb_sql-5.3.dll" v0.0 ts=2017-09-28 20:06
154k 2013/10/20 D:\LocalWork\cygwin\bin\cygedit-0.dll - os=4.0 img=0.0 sys=5.2
"cygedit-0.dll" v0.0 ts=2013-10-20 21:56
181k 2018/09/27 D:\LocalWork\cygwin\bin\cygexpat-1.dll - os=4.0 img=0.0 sys=5.2
"cygexpat-1.dll" v0.0 ts=2018-09-27 18:30
30k 2014/10/14 D:\LocalWork\cygwin\bin\cygfam-0.dll - os=4.0 img=0.0 sys=5.2
"cygfam-0.dll" v0.0 ts=2014-10-14 21:33
347k 2019/03/05 D:\LocalWork\cygwin\bin\cygfdisk-1.dll - os=4.0 img=0.0 sys=5.2
"cygfdisk-1.dll" v0.0 ts=2019-03-05 20:06
27k 2015/11/17 D:\LocalWork\cygwin\bin\cygffi-6.dll - os=4.0 img=0.0 sys=5.2
"cygffi-6.dll" v0.0 ts=2015-11-17 22:14
56k 2019/07/28 D:\LocalWork\cygwin\bin\cygformw-10.dll - os=4.0 img=0.0 sys=5.2
"cygformw-10.dll" v0.0 ts=2019-07-28 17:33
70k 2018/12/09 D:\LocalWork\cygwin\bin\cyggcc_s-seh-1.dll - os=4.0 img=0.0 sys=5.2
"cyggcc_s-seh-1.dll" v0.0 ts=2018-12-08 19:56
46k 2019/07/10 D:\LocalWork\cygwin\bin\cyggdbm-4.dll - os=4.0 img=0.0 sys=5.2
"cyggdbm-4.dll" v0.0 ts=2019-07-10 15:06
49k 2019/07/10 D:\LocalWork\cygwin\bin\cyggdbm-6.dll - os=4.0 img=0.0 sys=5.2
"cyggdbm-6.dll" v0.0 ts=2019-07-10 14:53
13k 2019/07/10 D:\LocalWork\cygwin\bin\cyggdbm_compat-4.dll - os=4.0 img=0.0 sys=5.2
"cyggdbm_compat-4.dll" v0.0 ts=2019-07-10 14:53
1398k 2018/02/11 D:\LocalWork\cygwin\bin\cyggio-2.0-0.dll - os=4.0 img=0.0 sys=5.2
"cyggio-2.0-0.dll" v0.0 ts=2018-02-11 19:03
993k 2018/02/11 D:\LocalWork\cygwin\bin\cygglib-2.0-0.dll - os=4.0 img=0.0 sys=5.2
"cygglib-2.0-0.dll" v0.0 ts=2018-02-11 19:01
15k 2018/02/11 D:\LocalWork\cygwin\bin\cyggmodule-2.0-0.dll - os=4.0 img=0.0 sys=5.2
"cyggmodule-2.0-0.dll" v0.0 ts=2018-02-11 19:01
527k 2017/01/21 D:\LocalWork\cygwin\bin\cyggmp-10.dll - os=4.0 img=0.0 sys=5.2
"cyggmp-10.dll" v0.0 ts=2017-01-21 18:25
938k 2017/05/02 D:\LocalWork\cygwin\bin\cyggnutls-28.dll - os=4.0 img=0.0 sys=5.2
"cyggnutls-28.dll" v0.0 ts=2017-05-02 22:06
1472k 2019/07/29 D:\LocalWork\cygwin\bin\cyggnutls-30.dll - os=4.0 img=0.0 sys=5.2
"cyggnutls-30.dll" v0.0 ts=2019-07-29 03:55
24k 2017/05/02 D:\LocalWork\cygwin\bin\cyggnutls-openssl-27.dll - os=4.0 img=0.0 sys=5.2
"cyggnutls-openssl-27.dll" v0.0 ts=2017-05-02 22:06
289k 2018/02/11 D:\LocalWork\cygwin\bin\cyggobject-2.0-0.dll - os=4.0 img=0.0 sys=5.2
"cyggobject-2.0-0.dll" v0.0 ts=2018-02-11 19:02
95k 2018/03/19 D:\LocalWork\cygwin\bin\cyggpg-error-0.dll - os=4.0 img=0.0 sys=5.2
"cyggpg-error-0.dll" v0.0 ts=2018-03-19 19:27
274k 2018/03/16 D:\LocalWork\cygwin\bin\cyggssapi_krb5-2.dll - os=4.0 img=0.0 sys=5.2
"cyggssapi_krb5-2.dll" v0.0 ts=2018-03-16 03:38
9k 2018/02/11 D:\LocalWork\cygwin\bin\cyggthread-2.0-0.dll - os=4.0 img=0.0 sys=5.2
"cyggthread-2.0-0.dll" v0.0 ts=2018-02-11 19:01
33k 2017/02/13 D:\LocalWork\cygwin\bin\cyghistory7.dll - os=4.0 img=0.0 sys=5.2
"cyghistory7.dll" v0.0 ts=2017-02-11 22:39
167k 2016/03/13 D:\LocalWork\cygwin\bin\cyghogweed-2.dll - os=4.0 img=0.0 sys=5.2
"cyghogweed-2.dll" v0.0 ts=2016-03-13 14:46
168k 2019/02/19 D:\LocalWork\cygwin\bin\cyghogweed-4.dll - os=4.0 img=0.0 sys=5.2
"cyghogweed-4.dll" v0.0 ts=2019-02-19 06:59
1009k 2015/02/20 D:\LocalWork\cygwin\bin\cygiconv-2.dll - os=4.0 img=0.0 sys=5.2
"cygiconv-2.dll" v0.0 ts=2015-02-20 17:07
197k 2017/05/02 D:\LocalWork\cygwin\bin\cygidn-11.dll - os=4.0 img=0.0 sys=5.2
"cygidn-11.dll" v0.0 ts=2017-05-02 01:18
114k 2019/07/29 D:\LocalWork\cygwin\bin\cygidn2-0.dll - os=4.0 img=0.0 sys=5.2
"cygidn2-0.dll" v0.0 ts=2019-07-29 03:22
42k 2016/10/23 D:\LocalWork\cygwin\bin\cygintl-8.dll - os=4.0 img=0.0 sys=5.2
"cygintl-8.dll" v0.0 ts=2016-10-23 07:17
192k 2018/03/16 D:\LocalWork\cygwin\bin\cygk5crypto-3.dll - os=4.0 img=0.0 sys=5.2
"cygk5crypto-3.dll" v0.0 ts=2018-03-16 03:37
754k 2018/03/16 D:\LocalWork\cygwin\bin\cygkrb5-3.dll - os=4.0 img=0.0 sys=5.2
"cygkrb5-3.dll" v0.0 ts=2018-03-16 03:37
37k 2018/03/16 D:\LocalWork\cygwin\bin\cygkrb5support-0.dll - os=4.0 img=0.0 sys=5.2
"cygkrb5support-0.dll" v0.0 ts=2018-03-16 03:36
144k 2019/07/21 D:\LocalWork\cygwin\bin\cyglzma-5.dll - os=4.0 img=0.0 sys=5.2
"cyglzma-5.dll" v0.0 ts=2019-07-22 00:15
129k 2017/10/05 D:\LocalWork\cygwin\bin\cyglzo2-2.dll - os=4.0 img=0.0 sys=5.2
"cyglzo2-2.dll" v0.0 ts=2017-10-05 19:40
125k 2018/03/18 D:\LocalWork\cygwin\bin\cygmagic-1.dll - os=4.0 img=0.0 sys=5.2
"cygmagic-1.dll" v0.0 ts=2018-03-18 15:17
168k 2018/01/23 D:\LocalWork\cygwin\bin\cygman-2-7-6-1.dll - os=4.0 img=0.0 sys=5.2
"cygman-2-7-6-1.dll" v0.0 ts=2018-01-23 20:22
22k 2018/01/23 D:\LocalWork\cygwin\bin\cygmandb-2-7-6-1.dll - os=4.0 img=0.0 sys=5.2
"cygmandb-2-7-6-1.dll" v0.0 ts=2018-01-23 20:22
28k 2019/07/28 D:\LocalWork\cygwin\bin\cygmenuw-10.dll - os=4.0 img=0.0 sys=5.2
"cygmenuw-10.dll" v0.0 ts=2019-07-28 17:32
346k 2017/11/04 D:\LocalWork\cygwin\bin\cygmpfr-4.dll - os=4.0 img=0.0 sys=5.2
"cygmpfr-4.dll" v0.0 ts=2017-11-04 18:48
432k 2019/02/02 D:\LocalWork\cygwin\bin\cygmpfr-6.dll - os=4.0 img=0.0 sys=5.2
"cygmpfr-6.dll" v0.0 ts=2019-02-02 18:25
301k 2019/07/28 D:\LocalWork\cygwin\bin\cygncursesw-10.dll - os=4.0 img=0.0 sys=5.2
"cygncursesw-10.dll" v0.0 ts=2019-07-28 17:30
180k 2016/03/13 D:\LocalWork\cygwin\bin\cygnettle-4.dll - os=4.0 img=0.0 sys=5.2
"cygnettle-4.dll" v0.0 ts=2016-03-13 14:46
205k 2019/02/19 D:\LocalWork\cygwin\bin\cygnettle-6.dll - os=4.0 img=0.0 sys=5.2
"cygnettle-6.dll" v0.0 ts=2019-02-19 06:59
1013k 2019/02/20 D:\LocalWork\cygwin\bin\cygp11-kit-0.dll - os=4.0 img=0.0 sys=5.2
"cygp11-kit-0.dll" v0.0 ts=2019-02-20 07:21
14k 2019/07/28 D:\LocalWork\cygwin\bin\cygpanelw-10.dll - os=4.0 img=0.0 sys=5.2
"cygpanelw-10.dll" v0.0 ts=2019-07-28 17:32
467k 2019/04/05 D:\LocalWork\cygwin\bin\cygpcre-1.dll - os=4.0 img=0.0 sys=5.2
"cygpcre-1.dll" v0.0 ts=2019-04-05 01:59
2210k 2019/08/24 D:\LocalWork\cygwin\bin\cygperl5_26.dll - os=4.0 img=0.0 sys=5.2
"cygperl5_26.dll" v0.0 ts=2019-08-24 11:22
41k 2019/09/12 D:\LocalWork\cygwin\bin\cygpipeline-1.dll - os=4.0 img=0.0 sys=5.2
"cygpipeline-1.dll" v0.0 ts=2019-09-12 19:52
52k 2019/02/20 D:\LocalWork\cygwin\bin\cygpkgconf-3.dll - os=4.0 img=0.0 sys=5.2
"cygpkgconf-3.dll" v0.0 ts=2019-02-20 02:06
41k 2016/07/13 D:\LocalWork\cygwin\bin\cygpopt-0.dll - os=4.0 img=0.0 sys=5.2
"cygpopt-0.dll" v0.0 ts=2016-07-13 06:16
65k 2019/07/21 D:\LocalWork\cygwin\bin\cygpsl-5.dll - os=4.0 img=0.0 sys=5.2
"cygpsl-5.dll" v0.0 ts=2019-07-21 19:18
219k 2017/02/13 D:\LocalWork\cygwin\bin\cygreadline7.dll - os=4.0 img=0.0 sys=5.2
"cygreadline7.dll" v0.0 ts=2017-02-11 22:39
11k 2015/07/17 D:\LocalWork\cygwin\bin\cygsigsegv-2.dll - os=4.0 img=0.0 sys=5.2
"cygsigsegv-2.dll" v0.0 ts=2015-07-17 22:35
150k 2019/03/05 D:\LocalWork\cygwin\bin\cygsmartcols-1.dll - os=4.0 img=0.0 sys=5.2
"cygsmartcols-1.dll" v0.0 ts=2019-03-05 20:06
988k 2019/10/08 D:\LocalWork\cygwin\bin\cygsqlite3-0.dll - os=4.0 img=0.0 sys=5.2
"cygsqlite3-0.dll" v0.0 ts=2019-10-08 14:45
495k 2019/09/13 D:\LocalWork\cygwin\bin\cygssl-1.1.dll - os=4.0 img=0.0 sys=5.2
"cygssl-1.1.dll" v0.0 ts=2019-09-13 18:36
12k 2017/11/13 D:\LocalWork\cygwin\bin\cygssp-0.dll - os=4.0 img=0.0 sys=5.2
"cygssp-0.dll" v0.0 ts=2017-11-13 21:52
1400k 2018/12/09 D:\LocalWork\cygwin\bin\cygsi++-6.dll - os=4.0 img=0.0 sys=5.2
"cygsi++-6.dll" v0.0 ts=2018-12-08 21:15
68k 2019/07/29 D:\LocalWork\cygwin\bin\cygtasn1-6.dll - os=4.0 img=0.0 sys=5.2
"cygtasn1-6.dll" v0.0 ts=2019-07-29 03:12
57k 2019/07/28 D:\LocalWork\cygwin\bin\cygticw-10.dll - os=4.0 img=0.0 sys=5.2
"cygticw-10.dll" v0.0 ts=2019-07-28 17:31
1612k 2018/08/16 D:\LocalWork\cygwin\bin\cygunistring-2.dll - os=4.0 img=0.0 sys=5.2
"cygunistring-2.dll" v0.0 ts=2018-08-16 20:33
27k 2019/03/05 D:\LocalWork\cygwin\bin\cyguuid-1.dll - os=4.0 img=0.0 sys=5.2
"cyguuid-1.dll" v0.0 ts=2019-03-05 20:06
31k 2018/07/14 D:\LocalWork\cygwin\bin\cygwrap-0.dll - os=4.0 img=0.0 sys=5.2
"cygwrap-0.dll" v0.0 ts=2018-07-14 11:43
1222k 2019/03/26 D:\LocalWork\cygwin\bin\cygxml2-2.dll - os=4.0 img=0.0 sys=5.2
"cygxml2-2.dll" v0.0 ts=2019-03-26 01:39
83k 2017/03/03 D:\LocalWork\cygwin\bin\cygz.dll - os=4.0 img=0.0 sys=5.2
"cygz.dll" v0.0 ts=2017-03-03 21:42
3415k 2019/04/30 D:\LocalWork\cygwin\bin\cygwin1.dll - os=4.0 img=0.0 sys=5.2
"cygwin1.dll" v0.0 ts=2019-04-30 19:08
Cygwin DLL version info:
DLL version: 3.0.7
DLL epoch: 19
DLL old termios: 5
DLL malloc env: 28
Cygwin conv: 181
API major: 0
API minor: 338
Shared data: 5
DLL identifier: cygwin1
Mount registry: 3
Cygwin registry name: Cygwin
Installations name: Installations
Cygdrive default prefix:
Build date:
Shared id: cygwin1S5
Service : cygsshd
Display name : CYGWIN cygsshd
Current State : Running
Controls Accepted : Stop
Command : /usr/sbin/sshd -D
stdin path : /dev/null
stdout path : /var/log/cygsshd.log
stderr path : /var/log/cygsshd.log
Process Type : Own Process
Startup : Automatic
Dependencies : cygserver
Account : LocalSystem
Service : cygserver
Display name : CYGWIN cygserver
Current State : Running
Controls Accepted : Stop
Command : /usr/sbin/cygserver
stdin path : /dev/null
stdout path : /var/log/cygserver.log
stderr path : /var/log/cygserver.log
Process Type : Own Process
Startup : Automatic
Dependencies : tcpip
Account : LocalSystem
Cygwin Package Information
Last downloaded files to: D:\Install\cygwin\packages
Last downloaded files from: http://mirrors.xmission.com/cygwin/
Package Version Status
_autorebase 001007-1 OK
Empty package _update-info-dir
_update-info-dir 03000-1 OK
alternatives 1.3.30c-10 OK
base-cygwin 3.8-1 OK
base-files 4.3-2 OK
bash 4.4.12-3 OK
bzip2 1.0.8-1 OK
ca-certificates 2.32-1 OK
coreutils 8.26-2 OK
Empty package crypt
crypt 2.1-1 OK
crypto-policies 20190218-1 OK
csih 0.9.11-1 OK
cygrunsrv 1.62-1 OK
cygutils 1.4.16-2 OK
cygwin 3.0.7-1 OK
cygwin-doc 3.0.7-1 OK
dash 0.5.9.1-1 OK
desktop-file-utils 0.23-1 OK
diffutils 3.5-2 OK
dos2unix 7.4.1-1 OK
ed 1.15-1 OK
editrights 1.03-1 OK
file 5.32-1 OK
findutils 4.6.0-1 OK
gamin 0.1.10-15 OK
gawk 5.0.1-1 OK
getent 2.18.90-4 OK
gettext 0.19.8.1-2 OK
grep 3.0-2 OK
groff 1.22.4-1 OK
gsettings-desktop-schemas 3.24.1-1 OK
gzip 1.8-1 OK
hostname 3.13-1 OK
info 6.7-1 OK
ipc-utils 1.0-2 OK
less 530-1 OK
libargp 20110921-3 OK
libattr1 2.4.48-2 OK
libblkid1 2.33.1-1 OK
libbz2_1 1.0.8-1 OK
libcom_err2 1.44.5-1 OK
libcrypt0 2.1-1 OK
libcrypt2 4.4.4-1 OK
libdb5.3 5.3.28-2 OK
libedit0 20130712-1 OK
libexpat1 2.2.6-1 OK
libfam0 0.1.10-15 OK
libfdisk1 2.33.1-1 OK
libffi6 3.2.1-2 OK
libgcc1 7.4.0-1 OK
libgdbm4 1.13-1 OK
libgdbm6 1.18.1-1 OK
libgdbm_compat4 1.18.1-1 OK
libglib2.0_0 2.54.3-1 OK
libgmp10 6.1.2-1 OK
libgnutls28 3.3.27-1 OK
libgnutls30 3.6.9-1 OK
libgpg-error0 1.28-1 OK
libgssapi_krb5_2 1.15.2-2 OK
libhogweed2 2.7.1-1 OK
libhogweed4 3.4.1-1 OK
libiconv 1.14-3 OK
libiconv2 1.14-3 OK
libidn11 1.33-1 OK
libidn2_0 2.2.0-1 OK
libintl8 0.19.8.1-2 OK
libk5crypto3 1.15.2-2 OK
libkrb5_3 1.15.2-2 OK
libkrb5support0 1.15.2-2 OK
liblzma5 5.2.4-1 OK
liblzo2_2 2.10-1 OK
libmpfr4 3.1.6-1p1 OK
libmpfr6 4.0.2-1 OK
libncursesw10 6.1-1.20190727 OK
libnettle4 2.7.1-1 OK
libnettle6 3.4.1-1 OK
Empty package libopenssl100
libopenssl100 1.0.2t-1 OK
libp11-kit0 0.23.15-1 OK
libpcre1 8.43-1 OK
libpipeline1 1.5.1-1 OK
libpkgconf3 1.6.0-1 OK
libpopt-common 1.16-2 OK
libpopt0 1.16-2 OK
libpsl5 0.21.0-1 OK
libreadline7 7.0.3-3 OK
libsigsegv2 2.10-2 OK
libsmartcols1 2.33.1-1 OK
libsqlite3_0 3.30.0-1 OK
libssl1.1 1.1.1d-1 OK
libssp0 6.4.0-4 OK
libsi++6 7.4.0-1 OK
libtasn1_6 4.14-1 OK
libunistring2 0.9.10-1 OK
libuuid1 2.33.1-1 OK
libwrap0 7.6-26 OK
libxml2 2.9.9-2 OK
login 1.13-1 OK
Empty package man
man 2.7.6.1-1 OK
man-db 2.7.6.1-1 OK
mintty 3.1.0-1 OK
ncurses 6.1-1.20190727 OK
openssh 8.1p1-1 OK
openssl 1.1.1d-1 OK
p11-kit 0.23.15-1 OK
p11-kit-trust 0.23.15-1 OK
p7zip 15.14.1-1 OK
perl 5.26.3-2 OK
Empty package perl-Carp
perl-Carp 1.38-2 OK
Empty package perl-Pod-Simple
perl-Pod-Simple 3.35-2 OK
perl-Unicode-Normalize 1.26-1 OK
perl_autorebase 5.26.3-2 OK
perl_base 5.26.3-2 OK
ping 1.9.4-1 OK
pkg-config 1.6.0-1 OK
pkgconf 1.6.0-1 OK
publicsuffix-list-dafsa 20190717-1 OK
rebase 4.4.4-1 OK
run 1.3.4-2 OK
sed 4.4-1 OK
shared-mime-info 1.8-1 OK
sharutils 4.15.2-1 OK
tar 1.29-1 OK
terminfo 6.1-1.20190727 OK
terminfo-extra 6.1-1.20190727 OK
texinfo 6.7-1 OK
tzcode 2019c-1 OK
tzdata 2019c-1 OK
unzip 6.0-17 OK
util-linux 2.33.1-1 OK
vim 8.1.1772-1 OK
vim-common 8.1.1772-1 OK
vim-minimal 8.1.1772-1 OK
wget 1.19.1-2 OK
which 2.20-2 OK
wput 0.6.2+git20130413-1 OK
xxd 8.1.1772-1 OK
xz 5.2.4-1 OK
zip 3.0-12 OK
zlib 1.2.11-1 OK
zlib-devel 1.2.11-1 OK
zlib0 1.2.11-1 OK
Use -h to see help about each section
[-- Attachment #3: sshd-client-fail-example.log --]
[-- Type: application/octet-stream, Size: 6363 bytes --]
tblhsa01apd:~/.ssh# ssh -vvvvv user-xx@fqdn-xx
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /root/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to fqdn-xx [1.2.3.4] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug3: Not a RSA1 key file /root/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: loaded 3 keys
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.1
debug1: match: OpenSSH_8.1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519
debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-sha1
debug1: kex: server->client aes128-ctr hmac-sha1 none
debug2: mac_init: found hmac-sha1
debug1: kex: client->server aes128-ctr hmac-sha1 none
debug2: dh_gen_key: priv key bits set: 155/320
debug2: bits set: 987/2048
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 211
debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 211
debug1: Host 'fqdn-xx' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:211
debug2: bits set: 1043/2048
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /root/.ssh/identity ((nil))
debug2: key: /root/.ssh/id_rsa ((nil))
debug2: key: /root/.ssh/id_dsa ((nil))
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug3: start over, passed a different list publickey,password,keyboard-interactive
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug3: no such identity: /root/.ssh/identity
debug1: Trying private key: /root/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug3: sign_and_send_pubkey
debug2: we sent a publickey packet, wait for reply
Connection closed by 1.2.3.4
[-- Attachment #4: sshd-client-success-example.log --]
[-- Type: application/octet-stream, Size: 7211 bytes --]
tblhsa01apd:~/.ssh# ssh -vvvvv user-xx@fqdn-xx
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /root/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to fqdn-xx [1.2.3.4] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug3: Not a RSA1 key file /root/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: loaded 3 keys
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.1
debug1: match: OpenSSH_8.1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: kex_parse_kexinit: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519
debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: kex_parse_kexinit: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_init: found hmac-sha1
debug1: kex: server->client aes128-ctr hmac-sha1 none
debug2: mac_init: found hmac-sha1
debug1: kex: client->server aes128-ctr hmac-sha1 none
debug2: dh_gen_key: priv key bits set: 150/320
debug2: bits set: 993/2048
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 211
debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 211
debug1: Host 'fqdn-xx' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:211
debug2: bits set: 1016/2048
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /root/.ssh/identity ((nil))
debug2: key: /root/.ssh/id_rsa ((nil))
debug2: key: /root/.ssh/id_dsa ((nil))
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug3: start over, passed a different list publickey,password,keyboard-interactive
debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug3: no such identity: /root/.ssh/identity
debug1: Trying private key: /root/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug3: sign_and_send_pubkey
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Trying private key: /root/.ssh/id_dsa
debug3: no such identity: /root/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethod_is_enabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug3: userauth_kbdint: disable: no info_req_seen
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred:
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
user-xx@fqdn-xx's password:
[-- Attachment #5: Type: text/plain, Size: 219 bytes --]
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: 3.0.7: Possible sshd bug when running as a service and public key offered
[not found] <BYAPR01MB5205D937AD9706CB9E793721B7420@BYAPR01MB5205.prod.exchangelabs.com>
@ 2019-12-03 13:16 ` Christopher Mapes
0 siblings, 0 replies; 2+ messages in thread
From: Christopher Mapes @ 2019-12-03 13:16 UTC (permalink / raw)
To: cygwin
I was able to get the debug logging working while running sshd as a service. Here is a snippet of the issue:
...
debug2: input_userauth_request: try method publickey [preauth]
debug2: userauth_pubkey: valid user user-xx attempting public key ssh-rsa rsa-data-xx [preauth]
debug3: userauth_pubkey: have ssh-rsa signature for RSA SHA256:sha-data-xx [preauth]
debug3: mm_key_allowed entering [preauth]
debug3: mm_request_send entering: type 22 [preauth]
debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
debug3: mm_request_receive_expect entering: type 23 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 22
debug3: mm_answer_keyallowed entering
debug3: mm_answer_keyallowed: key_from_blob: 0x60008fcf0
debug1: temporarily_use_uid: 1074753138/1073742337 (e=18/18)
seteuid 1074753138: No such device or address
debug1: do_cleanup
debug1: Killing privsep child 302
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-12-05 11:19 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-12-05 11:19 3.0.7: Possible sshd bug when running as a service and public key offered Christopher Mapes
[not found] <BYAPR01MB5205D937AD9706CB9E793721B7420@BYAPR01MB5205.prod.exchangelabs.com>
2019-12-03 13:16 ` Christopher Mapes
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).