need SSH help

need SSH help

[Jimmy Guo]

I'm trying to connect to sourceware.cygnus.com to commit patches.
Here is the connection log:

hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
hpcleara.cup.hp.com: Allocated local port 1023.
hpcleara.cup.hp.com: connect: Connection refused
hpcleara.cup.hp.com: Trying again...

Here is my ~/.ssh/identity.pub:
1024 33 13790079009770873084134387485307715444481437343440363961109653850777440\5751401956561282890895034974421818356366428367344377948923832033005332840751858\2064085340609801209358219066098468212288774931508327963754396852611499465125863\6497440825696500848516351082174034596714912620471349554474873926427253534710001\9 guo@hpcleara.cup.hp.com

--
 Jimmy Guo, guo@cup.hp.com       ADO eDL WDB
 Voice: 800-477-6111 ext. 7451   Hewlett-Packard Company
        (HP T-447-5229)          11000 Wolfe Road, MS 42UD
 Fax:   408-447-4629             Cupertino, CA 95014-0678

Re: need SSH help

[Chris Faylor]

On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>I'm trying to connect to sourceware.cygnus.com to commit patches.
>Here is the connection log:
>
>hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>hpcleara.cup.hp.com: Allocated local port 1023.
>hpcleara.cup.hp.com: connect: Connection refused
>hpcleara.cup.hp.com: Trying again...
>
>Here is my ~/.ssh/identity.pub:
>1024 33 13790079009770873084134387485307715444481437343440363961109653850777440\5751401956561282890895034974421818356366428367344377948923832033005332840751858\2064085340609801209358219066098468212288774931508327963754396852611499465125863\6497440825696500848516351082174034596714912620471349554474873926427253534710001\9 guo@hpcleara.cup.hp.com

That is roughly what your authorized_keys looks like on sourceware
except that the text above is interspersed with '\' characters for some
reason.

Are you unable to use cvs?  The only thing that your account is set up
for is cvs access.

cgf

Re: need SSH help

[Jim Kingdon]

> hpcleara.cup.hp.com: connect: Connection refused

This is the second time recently (if memory serves) that someone
posted asking about "Connection refused".  This message means that
nothing is listening on that port (usually it means some kind of
transient network problem, but it could be a problem in inetd.conf if
applicable for example).

Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
the theory that overseers is for us admins to write each other, not a
technical suport line.

Re: need SSH help

[Jason Molenda]

On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
> I'm trying to connect to sourceware.cygnus.com to commit patches.
> Here is the connection log:
> 
> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
> hpcleara.cup.hp.com: Allocated local port 1023.
> hpcleara.cup.hp.com: connect: Connection refused
> hpcleara.cup.hp.com: Trying again...

You might be firewalled.  Can you successfully telnet to sourceware
port 22?

Re: need SSH help

[Jimmy Guo]

On Wed, 2 Aug 2000, Jason Molenda wrote:

>On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>> I'm trying to connect to sourceware.cygnus.com to commit patches.
>> Here is the connection log:
>> 
>> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>> hpcleara.cup.hp.com: Allocated local port 1023.
>> hpcleara.cup.hp.com: connect: Connection refused
>> hpcleara.cup.hp.com: Trying again...
>
>You might be firewalled.  Can you successfully telnet to sourceware
>port 22?

Here is a identity.pub entry on my desktop (other than the server I
tried to connect from).  Please add it as well to see if it will work:
1024 37 158840215819718485869154935493995070927333106685711024572002096039219855624270949614599886630959718406730397822135136047436994057932350557025611535974528282804140729611601307871427923835027997592630345997972336790791187857850361063205082511047924467569412495626962570473233090334382383986866839628071653650967 guo@hpcll168.cup.hp.com

The ssh -v log from my desktop looks more promising:
Standard version.  Does not use RSAREF.
hpcll168.cup.hp.com: Reading configuration data /etc/ssh_config
hpcll168.cup.hp.com: ssh_connect: getuid 26653 geteuid 0 anon 0
hpcll168.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
hpcll168.cup.hp.com: Allocated local port 1018.

- Jimmy

Re: need SSH help

[Jonathan Larmour]

Jason Molenda wrote:
> 
> On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
> > I'm trying to connect to sourceware.cygnus.com to commit patches.
> > Here is the connection log:
> >
> > hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
> > hpcleara.cup.hp.com: Allocated local port 1023.
> > hpcleara.cup.hp.com: connect: Connection refused
> > hpcleara.cup.hp.com: Trying again...
> 
> You might be firewalled.  Can you successfully telnet to sourceware
> port 22?

Or (as I had happen recently) it may be being firewalled because the local
port is <1024. Some routers may have blanket deny rules for packets flowing
into, say, HP with ports < 1024. Instead they should only be filtering SYN
TCP packets, i.e. only if you are trying to initiate a connection.

But that may be the problem. If it is, then you can configure ssh to not
use privileged ports using the "UsePrivilegedPorts no" directive in your
.ssh/config.

Jifl
-- 
Red Hat, 35 Cambridge Place, Cambridge, UK. CB2 1NS  Tel: +44 (1223) 728762
"Plan to be spontaneous tomorrow."  ||  These opinions are all my own fault

Re: need SSH help

[Jimmy Guo]

Oh, I sort of figured out the problem, something to do with the
resolv.conf setup on that server I was trying to use.  right now
I can ssh and cvs fine.

- Jimmy

>On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>> I'm trying to connect to sourceware.cygnus.com to commit patches.
>> Here is the connection log:
>> 
>> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>> hpcleara.cup.hp.com: Allocated local port 1023.
>> hpcleara.cup.hp.com: connect: Connection refused
>> hpcleara.cup.hp.com: Trying again...
>
>You might be firewalled.  Can you successfully telnet to sourceware
>port 22?
>

 Jimmy Guo, guo@cup.hp.com       ADO eDL WDB
 Voice: 800-477-6111 ext. 7451   Hewlett-Packard Company
        (HP T-447-5229)          11000 Wolfe Road, MS 42UD
 Fax:   408-447-4629             Cupertino, CA 95014-0678

Re: need SSH help

[Jim Blandy]

> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
> the theory that overseers is for us admins to write each other, not a
> technical suport line.

I suggested that Jimmy write to this list.  If that was the 

Re: need SSH help

[Jim Blandy]

> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
> the theory that overseers is for us admins to write each other, not a
> technical suport line.

I suggested that Jimmy write to this list.  If that was the wrong
thing to do, I'm sorry about that.

Re: need SSH help

[Tom Tromey]

>> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
>> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
>> the theory that overseers is for us admins to write each other, not a
>> technical suport line.

Jim> I suggested that Jimmy write to this list.  If that was the wrong
Jim> thing to do, I'm sorry about that.

I think it is ok.
Some kinds of questions can be asked only here.

Tom

Re: need SSH help

[Jimmy Guo]

On Wed, 2 Aug 2000, Jason Molenda wrote:

>On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>> I'm trying to connect to sourceware.cygnus.com to commit patches.
>> Here is the connection log:
>> 
>> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>> hpcleara.cup.hp.com: Allocated local port 1023.
>> hpcleara.cup.hp.com: connect: Connection refused
>> hpcleara.cup.hp.com: Trying again...
>
>You might be firewalled.  Can you successfully telnet to sourceware
>port 22?

Here is a identity.pub entry on my desktop (other than the server I
tried to connect from).  Please add it as well to see if it will work:
1024 37 158840215819718485869154935493995070927333106685711024572002096039219855624270949614599886630959718406730397822135136047436994057932350557025611535974528282804140729611601307871427923835027997592630345997972336790791187857850361063205082511047924467569412495626962570473233090334382383986866839628071653650967 guo@hpcll168.cup.hp.com

The ssh -v log from my desktop looks more promising:
Standard version.  Does not use RSAREF.
hpcll168.cup.hp.com: Reading configuration data /etc/ssh_config
hpcll168.cup.hp.com: ssh_connect: getuid 26653 geteuid 0 anon 0
hpcll168.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
hpcll168.cup.hp.com: Allocated local port 1018.

- Jimmy

Re: need SSH help

[Tom Tromey]

>> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
>> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
>> the theory that overseers is for us admins to write each other, not a
>> technical suport line.

Jim> I suggested that Jimmy write to this list.  If that was the wrong
Jim> thing to do, I'm sorry about that.

I think it is ok.
Some kinds of questions can be asked only here.

Tom

Re: need SSH help

[Jason Molenda]

On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
> I'm trying to connect to sourceware.cygnus.com to commit patches.
> Here is the connection log:
> 
> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
> hpcleara.cup.hp.com: Allocated local port 1023.
> hpcleara.cup.hp.com: connect: Connection refused
> hpcleara.cup.hp.com: Trying again...

You might be firewalled.  Can you successfully telnet to sourceware
port 22?

Re: need SSH help

[Jim Blandy]

> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
> the theory that overseers is for us admins to write each other, not a
> technical suport line.

I suggested that Jimmy write to this list.  If that was the 

Re: need SSH help

[Jim Kingdon]

> hpcleara.cup.hp.com: connect: Connection refused

This is the second time recently (if memory serves) that someone
posted asking about "Connection refused".  This message means that
nothing is listening on that port (usually it means some kind of
transient network problem, but it could be a problem in inetd.conf if
applicable for example).

Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
the theory that overseers is for us admins to write each other, not a
technical suport line.

Re: need SSH help

[Jonathan Larmour]

Jason Molenda wrote:
> 
> On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
> > I'm trying to connect to sourceware.cygnus.com to commit patches.
> > Here is the connection log:
> >
> > hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
> > hpcleara.cup.hp.com: Allocated local port 1023.
> > hpcleara.cup.hp.com: connect: Connection refused
> > hpcleara.cup.hp.com: Trying again...
> 
> You might be firewalled.  Can you successfully telnet to sourceware
> port 22?

Or (as I had happen recently) it may be being firewalled because the local
port is <1024. Some routers may have blanket deny rules for packets flowing
into, say, HP with ports < 1024. Instead they should only be filtering SYN
TCP packets, i.e. only if you are trying to initiate a connection.

But that may be the problem. If it is, then you can configure ssh to not
use privileged ports using the "UsePrivilegedPorts no" directive in your
.ssh/config.

Jifl
-- 
Red Hat, 35 Cambridge Place, Cambridge, UK. CB2 1NS  Tel: +44 (1223) 728762
"Plan to be spontaneous tomorrow."  ||  These opinions are all my own fault

need SSH help

[Jimmy Guo]

I'm trying to connect to sourceware.cygnus.com to commit patches.
Here is the connection log:

hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
hpcleara.cup.hp.com: Allocated local port 1023.
hpcleara.cup.hp.com: connect: Connection refused
hpcleara.cup.hp.com: Trying again...

Here is my ~/.ssh/identity.pub:
1024 33 13790079009770873084134387485307715444481437343440363961109653850777440\5751401956561282890895034974421818356366428367344377948923832033005332840751858\2064085340609801209358219066098468212288774931508327963754396852611499465125863\6497440825696500848516351082174034596714912620471349554474873926427253534710001\9 guo@hpcleara.cup.hp.com

--
 Jimmy Guo, guo@cup.hp.com       ADO eDL WDB
 Voice: 800-477-6111 ext. 7451   Hewlett-Packard Company
        (HP T-447-5229)          11000 Wolfe Road, MS 42UD
 Fax:   408-447-4629             Cupertino, CA 95014-0678

Re: need SSH help

[Chris Faylor]

On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>I'm trying to connect to sourceware.cygnus.com to commit patches.
>Here is the connection log:
>
>hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>hpcleara.cup.hp.com: Allocated local port 1023.
>hpcleara.cup.hp.com: connect: Connection refused
>hpcleara.cup.hp.com: Trying again...
>
>Here is my ~/.ssh/identity.pub:
>1024 33 13790079009770873084134387485307715444481437343440363961109653850777440\5751401956561282890895034974421818356366428367344377948923832033005332840751858\2064085340609801209358219066098468212288774931508327963754396852611499465125863\6497440825696500848516351082174034596714912620471349554474873926427253534710001\9 guo@hpcleara.cup.hp.com

That is roughly what your authorized_keys looks like on sourceware
except that the text above is interspersed with '\' characters for some
reason.

Are you unable to use cvs?  The only thing that your account is set up
for is cvs access.

cgf

Re: need SSH help

[Jimmy Guo]

Oh, I sort of figured out the problem, something to do with the
resolv.conf setup on that server I was trying to use.  right now
I can ssh and cvs fine.

- Jimmy

>On Wed, Aug 02, 2000 at 01:31:57PM -0700, Jimmy Guo wrote:
>> I'm trying to connect to sourceware.cygnus.com to commit patches.
>> Here is the connection log:
>> 
>> hpcleara.cup.hp.com: Connecting to sourceware.cygnus.com [205.180.83.71] port 22
>> hpcleara.cup.hp.com: Allocated local port 1023.
>> hpcleara.cup.hp.com: connect: Connection refused
>> hpcleara.cup.hp.com: Trying again...
>
>You might be firewalled.  Can you successfully telnet to sourceware
>port 22?
>

 Jimmy Guo, guo@cup.hp.com       ADO eDL WDB
 Voice: 800-477-6111 ext. 7451   Hewlett-Packard Company
        (HP T-447-5229)          11000 Wolfe Road, MS 42UD
 Fax:   408-447-4629             Cupertino, CA 95014-0678

Re: need SSH help

[Jim Blandy]

> Andrew Cagney, you want to tell Jimmy Guo this (and/or "it seems to
> work for me now; try it again")?  I didn't CC Mr. Guo on this reply on
> the theory that overseers is for us admins to write each other, not a
> technical suport line.

I suggested that Jimmy write to this list.  If that was the wrong
thing to do, I'm sorry about that.